Cybersecurity Compliance Specialist

• Deliver cybersecurity and compliance expertise for the execution and continuous improvement of cybersecurity compliance processes workflows and supporting tools.
• Facilitate and execute cybersecurity assessments of targeted technologies and processes exercising sound judgment in evaluating control design and effectiveness.
• Coordinate and facilitate responses to customer and stakeholder cybersecurity questionnaires ensuring accurate and consistent representation of security controls and practices.
• Help design automation simplify processes and deployment of trust portal to facilitate customer security inquiries.
• Analyze review and monitor the effectiveness of cybersecurity controls across applications systems and processes to ensure alignment with frameworks and standards (E.g. ISO PCI NIST SWIFT etc.). Maintain up-to-date documentation of processes.
• Effectively balance cyber hygiene incremental improvement and future-focused projects in a manner which reduces cyber risk and facilitates enterprise efforts to achieve expanded offerings services growth and sustainability

• Document clear defensible assessment conclusions and communicate results to business partners technical contacts managers and stakeholders.
• Develop modify and support compliance process workflows and contribute to the development of key performance metrics to measure compliance effectiveness.
• Perform additional cyber compliance activities as assigned in support of expanded offerings evolving program needs and workstreams.

• Bachelor's degree from an accredited institution preferably in Information Technology Information Security Cybersecurity or equivalent discipline.

• Strong knowledge of cybersecurity control frameworks and standards such as ISO 27001 NIST CSF CIS Controls CMMC and related compliance requirements.
• Active nationally recognized cybersecurity certification (s) (CTPRP CISSP CISM CRISC)

• Experience in cybersecurity governance risk and/or compliance functions supporting enterprise environments.
• Demonstrated ability to analyze complex compliance problem sets and apply detailed diagnostic and critical thinking skills.
• Ability to adjust to multiple demands changing priorities ambiguity and rapid change while multitasking effectively

• Excellent verbal and written communication skills with the ability to explain technical and compliance topics to both technical and non‑technical audiences.

• Strong collaboration and interpersonal skills with the ability to work effectively across business units and functional teams to interact effectively with senior management

• Hands on experience with GRC platforms (e.g. ServiceNow IRM Archer Auditboard etc.)
• Knowledge of different cybersecurity technologies and tools
• Experience supporting customer security due diligence or questionnaire response processes.
• Experience in the complexities of working in a large global organization

• Communicating Complex Concepts: Knowledge of effective presentation tools and techniques to ensure clear understanding; ability to use summarization and simplification techniques to explain complex technical concepts in simple plain language appropriate to the audience.
• Consulting: Knowledge of techniques roles and responsibilities in providing technical or business guidance to clients both internal and external; ability to apply consulting knowledge appropriately.
• Cybersecurity Standards and Policies: Knowledge of developing cybersecurity policies standards and procedures; ability to develop and communicate policies standards and procedures that guide interactions with customers.
• Cybersecurity Risk Management: Knowledge of tools techniques approaches and processes of cybersecurity risk management; ability to ensure organizational network operation and minimize negative effect by cybersecurity risks.
• Information Security Management: Knowledge of the processes tools and techniques of information security management; ability to deploy and monitor information security systems while detecting controlling and preventing violations of IT security.
• Information Technology (IT) Security Policies: Knowledge of IT security policies standards and procedures; ability to utilize a variety of administrative skills sets and technical knowledge to ensure cyber security compliance.

• The primary locations for this position are: East Peoria IL Nashville TN or Dallas TX
• 5 days onsite is MANDATORY.
• Sponsorship is NOT available.
• Relocation is available.

• Medical dental and vision benefits*
• Paid time off plan (Vacation Holidays Volunteer etc.)*
• 401(k) savings plans*
• Health Savings Account (HSA)*
• Flexible Spending Accounts (FSAs)*
• Health Lifestyle Programs*
• Employee Assistance Program*
• Voluntary Benefits and Employee Discounts*
• Career Development*
• Incentive bonus*
• Disability benefits
• Life Insurance
• Parental leave
• Adoption benefits
• Tuition Reimbursement

What We Do

Cat Digital is the digital and technology arm of Caterpillar Inc. responsible for bringing digital capabilities to our world-famous yellow iron. With over 1.5M connected assets worldwide our teams use data technology advanced analytics and AI capabilities to help our customers build a better world.

Why Work With Us

The Cat Digital team is at the forefront of Caterpillar’s evolution. We take pride in solving complex problems by building new systems from the ground up. On our team you’ll leverage data from across our entire enterprise to find solutions that open a new world of possibilities for our customers and dealers. Join us in building a better tomorrow.

Gallery