Your Work Shapes the World at Caterpillar Inc.
When you join Caterpillar, you become part of a global team that not only focuses on the work we do but also cares about each other. We are the makers, problem solvers, and future world builders dedicated to creating stronger, more sustainable communities. Here, progress and innovation are realized with customers and everywhere we operate, building a better world for all.
Career Area
Legal and Compliance
What You Will Do
Provide Guidance on Execution of Enterprise IT Controls
Guide and train teams on ownership, implementation, and execution of Enterprise IT Controls.
Communicate, implement, and manage organizational change around IT control changes and ownership.
Coordinate and lead training of Process Owners, Execution Owners, and Execution teams on IT Controls requirements.
Develop strong relationships with Process Owners and Execution Owners.
Serve as the overall key contact for IT controls and governance compliance.
Provide Guidance On Remediation Of IT Controls
Provide enterprise governance and consultation on IT controls policies, processes, deadlines, and testing.
Ensure IT Control self‑attestation participants understand results and make recommendations based on implications.
Guide execution teams to ensure control issues are remediated timely.
Challenge stakeholders on root causes of risk and effectiveness of remediation activities.
Sustain Control Environment
Coordinate scheduling, monitoring, and management of internal self‑attestations across the enterprise.
Train Process Owners, Execution Owners, and Execution Team Members on completing self‑attestations.
Lead risk assessment reviews of processes to ensure compliance and proactively manage risk.
Escalate non‑compliance to controls or deadlines to IT Management.
Ensure IT controls and governance tools align with current organization and responsibilities.
Engage with Process Owners to understand compliance for their processes and offer improvement recommendations.
Lead teams in continuous improvement activities within the IT Control framework.
Execute User Acceptance Testing (UAT) for changes to the ServiceNow IRM module for the self‑attestation process.
Lead projects on continuous improvement of the IT Controls methodology.
Reporting
Identify and document reporting requirements to ensure relevant risk and compliance reporting to IT management.
Communicate relevant risk and compliance status to appropriate Process Owners and/or Execution Owners.
Skills
Process Management: Knowledge of business process improvement tools and techniques; understanding of monitoring, updating, controlling, or enhancing processes.
IT Risk Management: Knowledge of processes, tools, and techniques for assessing and controlling an organization’s exposure to IT risks.
Analytical Thinking: Ability to determine root causes of problems and create alternative solutions.
Data Gathering and Reporting: Knowledge of tools, techniques, and processes for gathering and reporting data.
Basic Requirements
Bachelor’s degree
Pre Advanced English
Proficient level of understanding and experience from more than one IT business operation and/or process (application development and support, infrastructure implementation and support).
Experience with processes, tools, and techniques for assessing and controlling an organization’s exposure to IT risks.
Ability to understand multiple perspectives, evaluate effectiveness and efficiency of processes, communicate appropriately, and make recommendations with a strategic enterprise perspective.
Preference for an auditing, compliance, cybersecurity, or risk management background and/or experience in managing risk through identification, assessment, and mitigation.
Top Candidates Will Also Have
Prior experience with identity and access management, role‑based access control (RBAC), proactive risk identification, continuous control monitoring, and process maturity analysis.
Hands‑on experience with Governance, Risk, and Compliance (GRC) platforms, specifically ServiceNow Integrated Risk Management (IRM) and/or AuditBoard.
Proven ability to configure, manage, and optimize workflows within these tools to support risk assessments, control monitoring, audit management, and compliance reporting.
Familiarity with integrating GRC tools into enterprise environments and leveraging automation for continuous control monitoring.
Hands‑on experience with data analysis and visualization tools/platforms (Snowflake, SQL, Power BI, Tableau, Microsoft Excel, etc.) and techniques.
Strong initiative, accountability, process focus, and communication skills.
Experience in delivering difficult issues and messages to business partners and/or IT leadership while maintaining composure.
Industry and professional certification(s) (e.g., CRISC, CISA, CISM, CISSP, CIA, CPA). Willingess or intent to obtain one within one year.
Additional Information
This position may require 10% travel.
Benefits
Medical plan
Dental plan
Medicines reimbursement
Psychological, Legal, Social and Finance Support Program
Private pension plan
Profit share
Meal assistance
Christmas basket
Transportation
Life and personal insurance
Extended maternity and paternity leave
Employee resources group (Young Professional, Women in Networking, LAMBDA (LGBTQIA+), Latin Group and Active in Sport)
Caterpillar reserves the right to change or modify benefits at any time, with prior notice and in compliance with legal requirements. Benefit eligibility may vary by position and location.
Recruitment & Selection
The Recruitment & Selection area does not use personal emails or emails from other domains (e.g., @gmail, @hotmail). All vacancies are advertised only through the company's official channels (www.caterpillar.com/careers.html; https://www.linkedin.com/company/caterpillar-inc). Official Caterpillar emails use the domain @cat.com. The company does not request any type of payment for the selection process.
Posting Dates
dezembro 10, 2025 - janeiro 4, 2026
Caterpillar is an Equal Opportunity Employer. Qualified applicants of any age are encouraged to apply.
Referrals increase your chances of interviewing at Caterpillar Inc. by 2x.
Seniority level
Not Applicable
Employment type
Full‑time
Job function
Information Technology
Construction and Machinery Manufacturing
#J-18808-Ljbffr