Career Area:

Job Description:

Your Work Shapes the World at Caterpillar Inc.

When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other.  We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

Role Definition:

Support risk and compliance programs in an engineering services office by assessing internal controls related to technical information protection, data privacy, physical security, financial reporting, and supplier governance.

Responsibilities:

Assist in maintaining and improving the Information Security Management System (ISMS) and compliance with ISO 27001 standards.

Support data privacy initiatives, including record-keeping, privacy impact assessments, and incident response activities.

Help implement and monitor physical security controls for facilities and engineering data.

Participate in supplier governance and third-party risk management processes, including due diligence and physical site reviews.

Conduct risk assessments, document findings, and contribute to corrective actions.

Prepare reports, maintain compliance documentation, and support internal audits.

Deliver compliance training and awareness sessions for staff and suppliers.

Collaborate with engineering, IT, procurement, and other teams to embed compliance into daily operations.

Educational Background:

Bachelor’s Degree in Engineering, Finance, Science, Commerce or Management.

Industry experience of 8+ years desired

Skill Descriptors:

Strong analytical thinking, process management, and documentation skills.

Process Management: Knowledge of business process improvement tools and techniques; ability to understand, monitor, update, control, or enhance existing business or work processes

Attention to details: Vigilant in detecting non-compliance, technical discrepancy, risk exposures across various processes

Working knowledge of ISO 27001, DPDP Act, and third-party risk management principles.

Experience with physical security, data protection, and supplier governance in a technical environment.

Effective communication and relationship-building abilities.

Familiarity with compliance technology (GRC platforms, DLP tools) is a plus.

Relevant certifications (ISO 27001 Foundation, Internal Auditor) preferred.

Audit and Compliance Function: Knowledge of major responsibilities and tasks of Audit and Compliance (A&C) function; ability to manage the operation of A&C function in various business environment.
 

Posting Dates:

Caterpillar is an Equal Opportunity Employer.  Qualified applicants of any age are encouraged to apply

Not ready to apply? Join our Talent Community.