Governance, Risk & Compliance (GRC) Consultant

Descrição

Career Area:

Job Description:

Your Work Shapes the World at Caterpillar Inc.

When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

The Governance, Risk & Compliance (GRC) Consultant serves as a subject matter expert supporting Quality Management System (QMS), Information Security Management System (ISMS), risk management, and compliance activities across the Autonomy & Automation (A&A), and MineStar product portfolios.

This position is responsible for maintaining and improving management systems aligned to ISO 9001 and ISO 27001 while supporting governance, audit readiness, risk management, compliance monitoring, and continuous improvement initiatives. Partners across functional areas to help ensure processes, controls, documentation, and supporting evidence align with organizational, customer, regulatory, and business requirements.

What You Will Do:

• Maintain and improve ISO 9001 and ISO 27001 management systems.
• Coordinate audit readiness, evidence collection, and certification activities.
• Maintain policies, procedures, standards, and management system documentation.
• Facilitate risk assessments and maintain risk registers and treatment plans.
• Track corrective actions, audit findings, and remediation efforts.
• Analyze and improve business and operational processes.
• Develop governance, quality, compliance, and risk metrics and reporting.
• Support compliance assessments, customer reviews, and regulatory obligations.
• Collaborate with cross-functional teams to ensure effective control implementation.
• Drive continuous improvement activities that enhance quality, security, and compliance outcomes.

What You Have:

• Process Management:
  • Supports implementation, maintenance, and continual improvement of Quality Management Systems (ISO 9001) and Information Security Management Systems (ISO 27001).
  • Develops, maintains, and improves policies, procedures, standards, work instructions, process maps, and supporting documentation.
  • Analyzes business and operational processes to identify opportunities for efficiency, standardization, and compliance improvements.
  • Creates process flows and workflow documentation to support governance, risk, compliance, audit, and quality activities.
  • Assists process owners in documenting and maintaining key processes, controls, and operational requirements.
  • Supports continuous improvement initiatives through corrective and preventive action activities.
• Risk Management:
  • Supports identification, assessment, and documentation of information security, operational, product, quality, and compliance risks.
  • Maintains risk registers, risk treatment plans, and risk acceptance documentation.
  • Assists risk owners in evaluating control effectiveness and determining appropriate mitigation activities.
  • Produces and interprets risk assessment reports and risk metrics.
  • Monitors risk remediation efforts and communicates status to stakeholders.
  • Supports integration of risk management practices into management system and governance processes.
• Analytical Thinking:
  • Evaluates complex business, technical, compliance, and quality issues to determine root causes and improvement opportunities.
  • Reviews audit findings, compliance gaps, process deficiencies, and risk trends to identify corrective actions.
  • Analyzes data from audits, assessments, incidents, and operational reviews to support informed decision-making.
  • Applies critical thinking to identify patterns, potential impacts, and practical solutions.
  • Supports continuous improvement efforts through trend analysis and process performance evaluation
• Effective Communications
  • Communicates governance, risk, quality, and compliance requirements clearly to technical and non-technical stakeholders.
  • Develops reports, presentations, and documentation supporting audits, management reviews, and compliance initiatives.
  • Provides guidance regarding management system requirements, controls, policies, and procedures.
  • Assists with training and awareness activities related to ISO 9001, ISO 27001, risk management, and compliance programs.
  • Translates technical and regulatory requirements into understandable business language.
• Audit and Compliance Function:
  • Supports operation and continual improvement of Quality Management System (QMS) and Information Security Management System (ISMS) programs.
  • Coordinates internal audits, external audits, surveillance audits, and certification activities.
  • Maintains audit evidence repositories and supporting compliance documentation.
  • Tracks audit findings, corrective actions, and remediation efforts through closure.
  • Assists with customer assessments, compliance reviews, and regulatory obligations.
  • Maintains working knowledge of applicable standards and frameworks, including ISO 9001, ISO 27001, and future regulatory requirements.

Consideration for Top Candidates:

• Bachelor's degree or equivalent experience desired
• Experience supporting Quality, Compliance, Audit, Risk, Cybersecurity, Information Security, or Process Improvement programs.
• Experience supporting SaaS, cloud, industrial technology, or product development organizations.
• Knowledge of risk management methodologies and control frameworks.
• Familiarity with SharePoint, Power BI, ServiceNow, or GRC software solutions.
• ISO 9001 Internal Auditor or Lead Auditor certification.
• ISO 27001 Internal Auditor, Lead Auditor, or Lead Implementer certification.
• ASQ Certified Quality Auditor (CQA) or equivalent quality certification.
• Knowledge of IEC 62443, NIST Cybersecurity Framework or EU Cyber Resilience Act requirements.

Additional Information:

• This position requires the candidate to work full-time at the Irving, TX office
• Relocation assistance is NOT available for this position
• Visa sponsorship is NOT available with this position.
• This position will require up to 10% travel
• #LI

Summary Pay Range:

Compensation and benefits offered may vary depending on multiple individualized factors, job level, market location, job-related knowledge, skills, individual performance and experience. Please note that salary is only one component of total compensation at Caterpillar.

Benefits:

Subject to plan eligibility, terms, and guidelines. This is a summary list of benefits.

• Medical, dental, and vision benefits*

• Paid time off plan (Vacation, Holidays, Volunteer, etc.)*

• 401(k) savings plans*

• Health Savings Account (HSA)*

• Flexible Spending Accounts (FSAs)*

• Health Lifestyle Programs*

• Employee Assistance Program*

• Voluntary Benefits and Employee Discounts*

• Career Development*

• Incentive bonus*

• Disability benefits

• Life Insurance

• Parental leave

• Adoption benefits

• Tuition Reimbursement

* These benefits also apply to part-time employees

Posting Dates:

Any offer of employment is conditioned upon the successful completion of a drug screen.

Caterpillar is an Equal Opportunity Employer, Including Veterans and Individuals with Disabilities. Qualified applicants of any age are encouraged to apply.

Not ready to apply? Join our Talent Community.