Governance, Risk & Compliance (GRC) Consultant

Caterpillar•Irving, TX

1d•Onsite

About The Position

The Governance, Risk & Compliance (GRC) Consultant serves as a subject matter expert supporting Quality Management System (QMS), Information Security Management System (ISMS), risk management, and compliance activities across the Autonomy & Automation (A&A), and MineStar product portfolios. This position is responsible for maintaining and improving management systems aligned to ISO 9001 and ISO 27001 while supporting governance, audit readiness, risk management, compliance monitoring, and continuous improvement initiatives. Partners across functional areas to help ensure processes, controls, documentation, and supporting evidence align with organizational, customer, regulatory, and business requirements.

Requirements

Process Management: Supports implementation, maintenance, and continual improvement of Quality Management Systems (ISO 9001) and Information Security Management Systems (ISO 27001).
Develops, maintains, and improves policies, procedures, standards, work instructions, process maps, and supporting documentation.
Analyzes business and operational processes to identify opportunities for efficiency, standardization, and compliance improvements.
Creates process flows and workflow documentation to support governance, risk, compliance, audit, and quality activities.
Assists process owners in documenting and maintaining key processes, controls, and operational requirements.
Supports continuous improvement initiatives through corrective and preventive action activities.
Risk Management: Supports identification, assessment, and documentation of information security, operational, product, quality, and compliance risks.
Maintains risk registers, risk treatment plans, and risk acceptance documentation.
Assists risk owners in evaluating control effectiveness and determining appropriate mitigation activities.
Produces and interprets risk assessment reports and risk metrics.
Monitors risk remediation efforts and communicates status to stakeholders.
Supports integration of risk management practices into management system and governance processes.
Analytical Thinking: Evaluates complex business, technical, compliance, and quality issues to determine root causes and improvement opportunities.
Reviews audit findings, compliance gaps, process deficiencies, and risk trends to identify corrective actions.
Analyzes data from audits, assessments, incidents, and operational reviews to support informed decision-making.
Applies critical thinking to identify patterns, potential impacts, and practical solutions.
Supports continuous improvement efforts through trend analysis and process performance evaluation.
Effective Communications: Communicates governance, risk, quality, and compliance requirements clearly to technical and non-technical stakeholders.
Develops reports, presentations, and documentation supporting audits, management reviews, and compliance initiatives.
Provides guidance regarding management system requirements, controls, policies, and procedures.
Assists with training and awareness activities related to ISO 9001, ISO 27001, risk management, and compliance programs.
Translates technical and regulatory requirements into understandable business language.
Audit and Compliance Function: Supports operation and continual improvement of Quality Management System (QMS) and Information Security Management System (ISMS) programs.
Coordinates internal audits, external audits, surveillance audits, and certification activities.
Maintains audit evidence repositories and supporting compliance documentation.
Tracks audit findings, corrective actions, and remediation efforts through closure.
Assists with customer assessments, compliance reviews, and regulatory obligations.
Maintains working knowledge of applicable standards and frameworks, including ISO 9001, ISO 27001, and future regulatory requirements.

Nice To Haves

Bachelor's degree or equivalent experience desired
Experience supporting Quality, Compliance, Audit, Risk, Cybersecurity, Information Security, or Process Improvement programs.
Experience supporting SaaS, cloud, industrial technology, or product development organizations.
Knowledge of risk management methodologies and control frameworks.
Familiarity with SharePoint, Power BI, ServiceNow, or GRC software solutions.
ISO 9001 Internal Auditor or Lead Auditor certification.
ISO 27001 Internal Auditor, Lead Auditor, or Lead Implementer certification.
ASQ Certified Quality Auditor (CQA) or equivalent quality certification.
Knowledge of IEC 62443, NIST Cybersecurity Framework or EU Cyber Resilience Act requirements.

Responsibilities

Maintain and improve ISO 9001 and ISO 27001 management systems.
Coordinate audit readiness, evidence collection, and certification activities.
Maintain policies, procedures, standards, and management system documentation.
Facilitate risk assessments and maintain risk registers and treatment plans.
Track corrective actions, audit findings, and remediation efforts.
Analyze and improve business and operational processes.
Develop governance, quality, compliance, and risk metrics and reporting.
Support compliance assessments, customer reviews, and regulatory obligations.
Collaborate with cross-functional teams to ensure effective control implementation.
Drive continuous improvement activities that enhance quality, security, and compliance outcomes.