Analyst Governance Risk & Compliance
Core
Ensure Trimble's product portfolio maintains compliance with security frameworks (ISO 27001, ISO 27701, SOC 2, NIST 800-171) and manage risk posture.
Role type
Cybersecurity GRC Compliance Analyst
Builds
Compliance certifications and audit readiness for Trimble's software and hardware solutions
Domain
Cybersecurity / Governance, Risk & Compliance
Required skills
ISO 27001/27701/SOC 2/NIST 800-171 auditing, gap analysis, risk assessment, policy writing, internal/external audit coordination, stakeholder communication, data privacy regulations (GDPR/CCPA), Jira Service Desk, Splunk, cloud platforms (AWS/Azure/GCP), scripting
Preferred skills
SEC+ or GSEC certification, ISO 27001 Lead Auditor certification, AI process automation, intermediate Linux/Windows administration
Technologies
ISO 27001, ISO 27701, SOC 2, NIST 800-171, Jira Service Desk, Splunk, AWS, Azure, GCP
Responsibilities
Perform gap analysis and recommend remediation for security frameworks; Conduct internal and external audits (ISO, SOC, NIST); Coordinate with external auditors and business stakeholders; Present risk metrics and audit results to senior leadership; Contribute to policy revisions and process optimization; Analyze risk posture and drive technical risk reduction.
Seniority
Mid-level individual contributor