• Job Description

  Req#: R0000226363

  Career Area:

  Information Technology

  Job Description:

  Your Work Shapes the World at Caterpillar Inc.

  When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

  Caterpillar’s cybersecurity team is seeking a Cyber Risk Specialist to facilitate the risk acknowledgement program. Responsibilities include tracking risks and statuses, ensuring quality inputs and data, and presenting risk response and analysis results. The person in this role will be responsible for understanding and implementing the cyber risk analysis methodology as well as providing support to the Cyber Risk Technical Lead.

  Responsibilities:

  • Drive maturity of and develop processes for the cyber risk acknowledgement program in alignment with align with overall Cyber Risk Management strategy.

  • Concisely present risk assessment results to senior leadership specific to their organization.

  • Present GRC concepts to the business in an easily understood and meaningful way to users with varying experience levels.

  • Understand and help support the risk analysis methodology based on Factor Analysis of Information Risk (FAIR)-based models, standard analysis scenarios and risk quantification tools/techniques.

  • Build and manage the automation between ServiceNow and RiskLens/Safe Security

  • Assist in guiding assessors and business partners in the accurate use of FAIR concepts in providing inputs to the FAIR-based risk triage process.

  • Collaborate with partners across the business on risk topics.

  Basic Qualifications:

  • Bachelor’s degree and minimum of five years of relevant experience

  • Familiarity with cyber risk management concepts

  • Familiarity with the Factor Analysis of Information Risk (FAIR) cyber risk quantification model

  Top Candidates Will Also Have:

  • Experience in the complexities of working in a large organization.

  • Knowledge of and experience with GRC tools and processes

  • Open FAIR Foundation certification

  • At least one of the following active certifications: CISA, CISM, CISSP, CRISC

  • Proven experience to confidently present to senior leadership

  • Excellent written and verbal communication skills with ability to explain complex issues to non-technical users.

  • Process-oriented and strong organizational skills

  • Proficient in Microsoft O365 products, including intermediate or greater skill with PowerPoint.

  • Strong analytical and critical thinking skills

  • Excellent interpersonal skills are required to manage issues or influence others inside and outside the department to take specific actions.

  
  Location

  The location for this role will be in Irving, TX, Nashville, TN, or Peoria, IL This is not a remote p osition.

  Relocation assistance is available.

  Relocation is available for this position.

  Visa Sponsorship is not available for this position. This employer is not currently hiring foreign national applicants that require or will require sponsorship tied to a specific employer, such as, H, L, TN, F, J, E, O. As a global company, Caterpillar offers many job opportunities outside of the U.S which can be found through our employment website at www.caterpillar.com/careers.

  EEO/AA Employer. All qualified individuals - Including minorities, females, veterans and individuals with disabilities - are encouraged to apply.

  Not ready to apply? Submit your information to our Talent Network here.

• About the company

  Since 1925, Caterpillar Inc. has been helping our customers build a better world – making sustainable progress possible and driving positive change on every continent. With 2020 sales and revenues of $41.7 billion, Caterpillar Inc. is the world’s leading manufacturer of construction and mining equipment, diesel and natural gas engines, industrial gas turbines, and diesel-electric locomotives. We do business on every continent, principally operating through three primary segments – Construction Industries, Resource Industries, and Energy & Transportation – and providing financing and related services through our Financial Products segment.

Notice