Analyst, Governance Risk & Compliance

Job not on LinkedIn

🔥 2 hours ago

🇺🇦 Ukraine – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

🚔 Compliance

🚫👨‍🎓 No degree required

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Trimble Inc.

WebsiteLinkedInAll Job Openings

10,000+ employees

📦 Logistics

🏭 Manufacturing

💼 Consulting

💰 Post-IPO Debt on 2022-12

Logistics • Manufacturing • Consulting

Trimble Inc. is a technology company that provides advanced solutions across various sectors including construction, transportation, geospatial, and natural resources. They empower industries to improve efficiency and profitability by leveraging real-time data insights, innovative software, and precise hardware. Trimble's solutions are used by millions of professionals globally, helping them to collaborate effectively and manage complex workflows, ultimately transforming how work gets done in diverse environments.

📋 Description

• Help ensure Trimble’s product portfolio maintains compliance with ISO 27001, ISO 27701, SOC 1 and 2, and NIST frameworks • Perform ISO 27001, ISO 27701, SOC 2, and NIST 800-171 gap analyses and recommend process, procedural, documentation, and tooling remediation • Improve compliance and certification scope efficiency through review and enhancement of the Trimble Common Control Framework • Perform ISO 27001 and ISO 27701 internal audits • Perform SOC 2 and NIST 800-171 internal and external audits • Contribute to annual policy revisions and maintenance of the Integrated Management System • Coordinate with business stakeholders and external auditors • Present Integrated Management System metrics, audit results, risk trends, and corrective action plans to senior leadership • Create processes and procedures to increase compliance-program efficiency across standards and frameworks • Collaborate with Cybersecurity team members and Trimble businesses across various geographies • Contribute to risk-management processes and ensure business risk posture is calculated and proactively managed • Produce and analyze information demonstrating each business’s risk posture and drive actions to reduce and manage technical risks • Communicate technical risks clearly to diverse stakeholders and adapt delivery to the audience • Communicate with Cybersecurity, IT, GRC, leadership, divisional and sector cybersecurity representatives, software development staff, Human Resources, and Legal • Work independently and as part of a global team

🎯 Requirements

• Familiarity with security frameworks and security control auditing, including ISO 27001, ISO 27701, ISO 42001, SOC 2, and NIST CSF • Experience with risk assessments and scoring, gap analysis, internal audits, and external audit coordination • Flexibility to work 6 months project based and 6 months audit • Proficiency in English, written and oral • Working knowledge of ISO 27001, ISO 27701, SOC 2, and NIST 800-171 • Ability to design audit controls spanning ISO 27001, ISO 27701, SOC 2, and NIST 800-171 • Ability to write policy and interpret complex business changes • Comprehensive understanding of risk management standards and guidelines • General IT knowledge, including networking, cloud computing, and software development • General knowledge of data privacy regulations, including GDPR and CCPA • Excellent organizational, presentation, communication, time management, analytical, problem-solving, and decision-making skills • Ability to work independently, collaboratively, under pressure, and with changing priorities • Relevant degree in Data Science, Computer Science, or Engineering is preferable, not required • Current general security certifications such as SEC+ or GSEC encouraged but not required • ISO 27001 Certified Internal / Lead Auditor certification or equivalent experience • 2 years of experience working with ISO 27001, ISO 27701, SOC 2, and/or NIST 800-171 • 2 years of experience in a risk management, information security, or systems engineer/administrator role in a large international software company • Hands-on experience with GRC tools such as Jira Service Desk • Experience collecting information from disparate data sources and formulating reports for various audiences • Intermediate experience with Windows and Linux/Unix operating systems • Intermediate cloud knowledge in AWS, Azure, and GCP • Intermediate scripting knowledge and experience with Splunk and creating queries • Experience using AI to reduce manual processes and procedures

🏖️ Benefits

• Join a diverse and collaborative international cybersecurity team • Values-driven culture centered on Belong, Grow, and Innovate • Career growth opportunities • Opportunity to contribute innovative ideas and build impactful strategies • Application accommodations available upon request

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume