Analyst Governance Risk & Compliance

Position: Cybersecurity GRC — Compliance Analyst

Location: Ukraine/remote

Reporting to Manager, Governance, Risk & Compliance (UA)

FOR APLLY: https://trimble.wd1.myworkdayjobs.com/TrimbleCareers/job/Ukraine---Remote/Analyst--Governance-Risk---Compliance_R58165

Elevate Global Security Standards: Cybersecurity GRC & Compliance Analyst

Shape the future of global digital trust at Trimble by guiding enterprise-wide compliance across industry-leading cloud and software solutions. In this high-impact role, you will champion robust governance frameworks, lead proactive risk assessments, and collaborate with diverse international teams to safeguard brand integrity while directly supporting transformative technologies that connect the physical and digital worlds.

What Makes This Role Great:

You will serve as a versatile security partner across an expansive global product portfolio, driving real strategic impact through the Trimble Common Control Framework rather than routine checklist compliance. Enjoy a dynamic hybrid schedule alternating between deep project optimization and active audit cycles, with ample opportunity to introduce AI-driven efficiencies and shape policy across a forward-thinking, publicly traded enterprise.

Key Exciting Responsibilities

• Lead comprehensive gap analyses and internal audits across key global standards including ISO 27001, ISO 27701, SOC 2, and NIST 800−171.
• Enhance and streamline compliance scope by evolving the Trimble Common Control Framework across diverse international business divisions.
• Coordinate external audit processes and partner with cross-functional technical teams to implement remediation and process improvements.
• Translate complex technical risk assessments into actionable metrics and presentations for senior leadership to drive proactive risk mitigation.
• Implement process automation and innovative tooling to boost the efficiency and agility of the overall compliance program.

Essential Skills & Experience

• Demonstrated hands-on experience conducting gap assessments or audits against frameworks such as ISO 27001, ISO 27701, SOC 2, or NIST standards.
• Solid background in risk management, information security, or systems administration within an international technology environment.
• Proven ability to interpret technical requirements, draft clear governance policies, and communicate risk insights to technical and non-technical partners.
• Strong foundational knowledge of enterprise IT concepts, operating systems, and core cloud infrastructure.
• Professional working proficiency in English with excellent collaborative problem-solving skills.
• Certified ISO 27001 Internal or Lead Auditor credential, or relevant security certifications such as Security+ or GSEC.
• Practical familiarity with GRC platforms, ticketing systems like Jira Service Desk, or log analysis tools such as Splunk.
• Working knowledge of global data privacy regulations including GDPR and CCPA.
• Experience leveraging AI technologies or automation scripts to optimize manual compliance workflows.
• Relevant academic background in Computer Science, Engineering, Data Science, or a related field.

Cybersecurity, GRC, Compliance Analyst, ISO 27001, ISO 27701, SOC 2, NIST 800−171, Internal Audit, External Audit, Risk Management, Gap Analysis, Common Control Framework, Cloud Security, Information Security, Remote Ukraine