{"id":3684254,"url":"https://alion.io/job/fortive-information-security-grc","title":"Information Security- GRC","company":{"id":1907282,"name":"Fortive","domain":"fortive.com","url":"https://alion.io/company/fortive","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"A","score":91,"open_postings":44,"ghost_share":0,"stale_share":0.341,"repost_share":0.045,"time_to_fill_p50_days":55,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CMMC","optional":false},{"name":"Design Controls","optional":false},{"name":"EU AI Act","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SBOM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-26T15:54:15Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-07T13:31:23Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"Information Security Compliance Analyst\nJob Description:\nFluke's Information Security GRC team is seeking an experienced compliance professional to lead day-to-day execution of our audit and certification programs which include: SOX ITGC / ITAC, ISO 27001, SOC 2 Type II, NIS2, EU Cyber Resilience Act, and Cyber Essentials Plus. Also to help extend our coverage into emerging regulatory and AI governance requirements. You will serve as a primary point of contact for our external auditors and Internal Audit, translate audit requirements into clear asks for IT and business control owners, and keep evidence accurate, complete and on time.\nThis is more than an audit compliance role. You will also own key parts of our risk program, third-party risk management (TPRM) and enterprise / information security risk management (ERM) and help customers trust Fluke products by completing security questionnaires and assessments about our products, software and services.\nReporting to the Senior Information Security Compliance Lead, you will step into ownership of established workstreams through a structured onboarding and knowledge-transfer period, and are expected to operate independently on core audit programs within the first six months. This role is critical to protecting Fluke's audit posture, reducing compliance risk, and keeping our commitments to auditors, Fortive and customers.\nResponsibilities:\nAudit leadership & SOX\nLead SOX ITGC and ITAC execution: quarterly and occurrence-based control performance, roll-forward inquiries, control testing and evidence submission, in partnership with the external auditor and Fortive Internal Audit.\nAct as primary audit liaison: lead walkthroughs, manage PBC / evidence requests, translate auditor follow-ups into defined requirements for control owners, and deliver complete evidence before deadlines.\nCoordinate evidence across key systems, including ERP, data and analytics platforms, and change-management tooling. Covering privileged access, change management, key reports / IPE and ITAC configurations.\nMaintain segregation of duties within the team's test / review / sign-off model, performing control testing and secondary review as required.\nTrack and report control status, remediation items and prior-year improvement opportunities to GRC leadership and Finance stakeholders; act as SOX lead during the Compliance Lead's absence.\nCertifications & attestations\nOwn ISO 27001 control operations: control ownership, quarterly access reviews, control evaluations, corrective actions, and surveillance / recertification audits, including onboarding new products into scope.\nLead or support SOC 2 Type II and Cyber Essentials / CE+ audits from scoping and kickoff through auditor facilitation and evidence collection.\nCustomer & product security assurance\n Own completion of customer security questionnaires and RFP / RFI security sections for Fluke products, software and services (including connected test tools, coordinating with Product Security, Engineering, IT, Legal and Sales for accurate, on-time responses.\n Maintain an approved answer library and supporting evidence (policies, certifications, SOC 2 reports, penetration test summaries) and keep Trust Center content current.\nSupport customer and supplier security audits and assessments, and track security commitments made to customers through to closure.\nEscalate product-specific gaps or contractual security requirements to Product Security and Legal, and feed recurring customer asks back into the control program.\nRegulatory frameworks & emerging requirements\n Maintain framework mappings (SOX, ISO 27001, SOC 2, NIST 800-171 / CMMC, NIS2, PCI DSS, EU Data Act) to a unified control set so controls are tested once and satisfy many requirements.\n Support EU Cyber Resilience Act (CRA) compliance with Product Security / PSIRT, and monitor and gap-assess new cybersecurity regulations with Fluke Compliance teams to reduce duplicate work.\nThird-party risk management (TPRM)\nOwn the TPRM process from intake to closure, managing a steady volume of vendor requests: scoping, risk tiering, and determining when suppliers fall outside TPRM scope.\n Conduct vendor security assessments, review security questionnaires, SOC reports, certifications and contract security terms, and document risk-based approvals, conditions (e.g., use of Fluke-provided environments) and remediation.\nPartner with Procurement, Legal and business owners so reviews keep pace with onboarding; establish ongoing monitoring for critical suppliers and AI-specific vendor review criteria.\nEnterprise risk management (ERM)\nMaintain the information security risk register and risk-acceptance process: risk assessments, owner accountability, expiring acceptances and migration of legacy risk records.\nDrive corrective actions and overdue control evaluations to closure, following up with control owners and escalating only when blocked.\nSupport enterprise risk reviews and the Risk Profile, including IAM / MFA metrics and remediation campaigns, and prepare risk reporting for InfoSec leadership.\nGRC tooling & program operations\nAdminister and improve tools as the system of record for GRC controls, help design controls by framework, dashboards, control-gap reports, evidence views and auditor-facing access.\nDrive evidence automation and continuous control monitoring to shorten audit cycles and catch control failures between audits.\nAuthor and maintain SOPs, guidelines and policies, converting recurring work into documented standard work.\nQualifications:\nRequired\n5+ years in IT compliance, IT audit or GRC related roles\nDemonstrated experience as the primary liaison with external auditors, leading walkthroughs, managing evidence requests and remediating findings within audit timelines.\nWorking knowledge of ISO 27001 ISMS operation and certification audits, and experience supporting SOC 2 Type II.\nFamiliarity with additional frameworks such as NIST 800-171 / CMMC, Cyber Essentials, EU CRA and NIS2.\nHands-on third-party and enterprise risk management experience: vendor security assessments, SOC report review, risk tiering, risk registers and risk-acceptance workflows.\nExperience completing customer security questionnaires (e.g., SIG, CAIQ or custom customer assessments) and RFP security responses, ideally for hardware, software or SaaS products.\nHands-on experience with a GRC platform.\nProven ability to lead multiple concurrent audits and workstreams independently and meet fixed deadlines.\nEffective written and verbal communication, with the ability to explain complex compliance requirements to technical and non-technical stakeholders.\nDemonstrated ability to work collaboratively and build positive working relationships with colleagues at all levels, including global teams.\nHigh level of integrity and ethics, maintaining confidentiality and professionalism in handling sensitive information.\nPreferred\nProfessional certification: CISA, CRISC, CISSP, CISM, or ISO 27001 Lead Auditor / Lead Implementer.\nExperience with emerging requirements such as the EU Cyber Resilience Act, product security compliance, or AI governance frameworks (EU AI Act, NIST AI RMF, ISO/IEC 42001).\nFamiliarity with product security standards and practices (e.g., IEC 62443, secure development lifecycle, SBOM, coordinated vulnerability disclosure) to answer product-related customer inquiries.\nExperience harmonizing controls across frameworks (e.g., Secure Controls Framework) and automating evidence collection.\nExperience in a manufacturing, industrial technology or multinational, matrixed environment.\nFortive Corporation Overview\nFortive's essential technology makes the world safer and more productive. We accelerate transformation in high-impact fields like workplace safety, build environments, and healthcare.\nWe are a global industrial technology innovator with a startup spirit. Our forward-looking companies lead the way in healthcare sterilization, industrial safety, predictive maintenance, and other mission-critical solutions. We're a force for progress, working alongside our customers and partners to solve challenges on a global scale, from workplace safety in the most demanding conditions to advanced technologies that help providers focus on exceptional patient care.\nWe are a diverse team 10,000 strong, united by a dynamic, inclusive culture and energized by limitless learning and growth. We use the proven Fortive Business System (FBS) to accelerate our positive impact.\nAt Fortive, we believe in you. We believe in your potential-your ability to learn, grow, and make a difference.\nAt Fortive, we believe in us. We believe in the power of people working together to solve problems no one could solve alone.\nAt Fortive, we believe in growth. We're honest about what's working and what isn't, and we never stop improving and innovating.\nFortive: For you, for us, for growth.\nAbout Fluke\nFluke is leading the world in creating software, test tools and technology that will support customers today and in the future. We are a customer-obsessed market leader with a strong reputation for reliability, quality and safety.A wholly owned subsidiary of Fortive Corporation (www.fortive.com), Fluke is a global corporation headquartered in the greater Seattle area. Driven by the successful Fortive Business System, Fluke offers the passion of a startup with the resources of a Fortune 500 company. We are focused on the growth of our individual employees, teams and the Fluke brand.\nWe Are an Equal Opportunity Employer. Fortive Corporation and all Fortive Companies are proud to be equal opportunity employers. We value and encourage diversity and solicit applications from all qualified applicants without regard to race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity or expression, or other characteristics protected by law. Fortive and all Fortive Companies are also committed to providing reasonable accommodations for applicants with disabilities. Individuals who need a reasonable accommodation because of a disability for any part of the employment application process, please contact us at .","description_format":"text","description_chars":10222,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Security Compliance","Test & Measurement Instruments","Manufacturing & Industrial Software"],"lifecycle":[{"event":"open","at":"2026-11-03T14:21:28Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":11,"expected_fill_days":55,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/fortive-information-security-grc","json_url":"https://alion.io/job/fortive-information-security-grc.json","meta":{"generated_at":"2026-11-07T15:25:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20842,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1907282},"rest":"https://alion.io/mcp/rest/get_company?id=1907282"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffortive-information-security-grc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffortive-information-security-grc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffortive-information-security-grc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fortive-information-security-grc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffortive-information-security-grc"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3684254}},{"tool":"search_jobs","arguments":{"company":"fortive.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3684254},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}