Analyst, Governance Risk & Compliance

Trimble Inc.

. Help ensure Trimble’s product portfolio maintains compliance with ISO 27001, ISO 27701, SOC 1 and 2, and NIST frameworks .

Posted 11/6/2026full-timeRemote • UkraineJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in compliance with ISO 27001, ISO 27701, SOC 2, and NIST frameworks, alongside strong risk management capabilities. Proficient in conducting audits, gap analyses, and enhancing compliance processes while effectively communicating technical risks to diverse stakeholders.

Highest-signal resume keywords

ISO 27001 ComplianceSOC 2 AuditingRisk ManagementInternal AuditsGRC Tools

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Gap AnalysisRisk AssessmentAudit Control DesignData Privacy RegulationsTechnical Risk CommunicationPolicy WritingScripting KnowledgeCloud ComputingNetworkingInformation Security

Soft Skills

Analytical SkillsProblem-SolvingDecision-MakingTime ManagementCommunication Skills

Tools & Technologies

Jira Service DeskSplunkAWSAzureGCPWindowsLinuxUnix

Certifications & Qualifications

ISO 27001 Certified Internal AuditorSEC+GSEC

Industry Keywords

ISO 27701NIST 800-171Integrated Management SystemCybersecurityData ScienceComputer ScienceEngineeringGDPRCCPACompliance Frameworks

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformLinuxSplunkUnix

About the role

Key responsibilities & impact

Help ensure Trimble’s product portfolio maintains compliance with ISO 27001, ISO 27701, SOC 1 and 2, and NIST frameworks
Perform ISO 27001, ISO 27701, SOC 2, and NIST 800-171 gap analyses and recommend process, procedural, documentation, and tooling remediation
Improve compliance and certification scope efficiency through review and enhancement of the Trimble Common Control Framework
Perform ISO 27001 and ISO 27701 internal audits
Perform SOC 2 and NIST 800-171 internal and external audits
Contribute to annual policy revisions and maintenance of the Integrated Management System
Coordinate with business stakeholders and external auditors
Present Integrated Management System metrics, audit results, risk trends, and corrective action plans to senior leadership
Create processes and procedures to increase compliance-program efficiency across standards and frameworks
Collaborate with Cybersecurity team members and Trimble businesses across various geographies
Contribute to risk-management processes and ensure business risk posture is calculated and proactively managed
Produce and analyze information demonstrating each business’s risk posture and drive actions to reduce and manage technical risks
Communicate technical risks clearly to diverse stakeholders and adapt delivery to the audience
Communicate with Cybersecurity, IT, GRC, leadership, divisional and sector cybersecurity representatives, software development staff, Human Resources, and Legal
Work independently and as part of a global team

Requirements

What you’ll need

Familiarity with security frameworks and security control auditing, including ISO 27001, ISO 27701, ISO 42001, SOC 2, and NIST CSF
Experience with risk assessments and scoring, gap analysis, internal audits, and external audit coordination
Flexibility to work 6 months project based and 6 months audit
Proficiency in English, written and oral
Working knowledge of ISO 27001, ISO 27701, SOC 2, and NIST 800-171
Ability to design audit controls spanning ISO 27001, ISO 27701, SOC 2, and NIST 800-171
Ability to write policy and interpret complex business changes
Comprehensive understanding of risk management standards and guidelines
General IT knowledge, including networking, cloud computing, and software development
General knowledge of data privacy regulations, including GDPR and CCPA
Excellent organizational, presentation, communication, time management, analytical, problem-solving, and decision-making skills
Ability to work independently, collaboratively, under pressure, and with changing priorities
Relevant degree in Data Science, Computer Science, or Engineering is preferable, not required
Current general security certifications such as SEC+ or GSEC encouraged but not required
ISO 27001 Certified Internal / Lead Auditor certification or equivalent experience
2 years of experience working with ISO 27001, ISO 27701, SOC 2, and/or NIST 800-171
2 years of experience in a risk management, information security, or systems engineer/administrator role in a large international software company
Hands-on experience with GRC tools such as Jira Service Desk
Experience collecting information from disparate data sources and formulating reports for various audiences
Intermediate experience with Windows and Linux/Unix operating systems
Intermediate cloud knowledge in AWS, Azure, and GCP
Intermediate scripting knowledge and experience with Splunk and creating queries
Experience using AI to reduce manual processes and procedures

Benefits

Comp & perks

Join a diverse and collaborative international cybersecurity team
Values-driven culture centered on Belong, Grow, and Innovate
Career growth opportunities
Opportunity to contribute innovative ideas and build impactful strategies
Application accommodations available upon request