Governance, Risk & Compliance (GRC) Consultant

Career Area: Legal and Compliance Job Description: Your Work Shapes the World at Caterpillar Inc. When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other.  We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it. The Governance, Risk & Compliance (GRC) Consultant serves as a subject matter expert supporting Quality Management System (QMS), Information Security Management System (ISMS), risk management, and compliance activities across the Autonomy & Automation (A&A), and MineStar product portfolios.  This position is responsible for maintaining and improving management systems aligned to ISO 9001 and ISO 27001 while supporting governance, audit readiness, risk management, compliance monitoring, and continuous improvement initiatives. Partners across functional areas to help ensure processes, controls, documentation, and supporting evidence align with organizational, customer, regulatory, and business requirements.

Maintain and improve ISO 9001 and ISO 27001 management systems.  Coordinate audit readiness, evidence collection, and certification activities.  Maintain policies, procedures, standards, and management system documentation.  Facilitate risk assessments and maintain risk registers and treatment plans.  Track corrective actions, audit findings, and remediation efforts.  Analyze and improve business and operational processes.  Develop governance, quality, compliance, and risk metrics and reporting.  Support compliance assessments, customer reviews, and regulatory obligations.  Collaborate with cross-functional teams to ensure effective control implementation.  Drive continuous improvement activities that enhance quality, security, and compliance outcomes.  What You Have: Process Management:        Supports implementation, maintenance, and continual improvement of Quality Management Systems (ISO 9001) and Information Security Management Systems (ISO 27001).  Develops, maintains, and improves policies, procedures, standards, work instructions, process maps, and supporting documentation.  Analyzes business and operational processes to identify opportunities for efficiency, standardization, and compliance improvements.  Creates process flows and workflow documentation to support governance, risk, compliance, audit, and quality activities.  Assists process owners in documenting and maintaining key processes, controls, and operational requirements.  Supports continuous improvement initiatives through corrective and preventive action activities.  Risk Management: Supports identification, assessment, and documentation of information security, operational, product, quality, and compliance risks.  Maintains risk registers, risk treatment plans, and risk acceptance documentation.  Assists risk owners in evaluating control effectiveness and determining appropriate mitigation activities.  Produces and interprets risk assessment reports and risk metrics.  Monitors risk remediation efforts and communicates status to stakeholders.  Supports integration of risk management practices into management system and governance processes. Analytical Thinking: Evaluates complex business, technical, compliance, and quality issues to determine root causes and improvement opportunities.  Reviews audit findings, compliance gaps, process deficiencies, and risk trends to identify corrective actions.  Analyzes data from audits, assessments, incidents, and operational reviews to support informed decision-making.  Applies critical thinking to identify patterns, potential impacts, and practical solutions.  Supports continuous improvement efforts through trend analysis and process