Manager Cybersecurity

Caterpillar•Tucson, IL

3d•Onsite

About The Position

Cat Technology collaborates with partners across the Caterpillar enterprise to advance technologies including autonomy and automation, which helps enhance site safety, productivity and efficiency across customer operations worldwide. Cat Technology also owns enterprise-wide initiatives in innovation, research and development, manufacturing automation and advanced materials, ensuring Caterpillar continues to lead the industry in technological excellence and engineering innovation. As a Manager Cybersecurity – Governance, Risk & Compliance , you will lead security compliance and assurance for A&A products and platforms. You will own regulatory readiness, standards compliance, audit outcomes, and customer security assurance across a global, safety‑critical portfolio. You’ll guide a small team focused on CRA, IEC 62443, ISO 27001, and ISO 9001 alignment while driving risk governance and providing executive‑level visibility. This role is ideal for a pragmatic, execution‑focused leader who thrives at the intersection of engineering, regulation, quality, and customer trust.

Requirements

A bachelor’s degree in Cybersecurity, Information Security, Computer Science, Computer Engineering, Electrical Engineering or related field.
Knowledge of effective planning techniques and ability to contribute to operational (short term), tactical (1-2 years) and strategic (3-5 years) planning in support of the overall business plan.
Knowledge of processes, tools and techniques for assessing and controlling an organization's exposure to risks of various kinds; ability to apply knowledge of risk management appropriately to diverse situations.
Knowledge of the critical competencies required to achieve intended results; ability to generate consistent approaches for hiring, selection, retaining and leveraging talent across the organization.
Knowledge of effective team building techniques; ability to form and manage effective teams.
Knowledge of IT security policies, standards, and procedures; ability to utilize a variety of administrative skill sets and technical knowledge to ensure cyber security compliance.
Knowledge of network attacks and the defenses used; ability to defend and prevent electronic threats, theft and attacks.

Nice To Haves

Knowledge of the processes, tools and techniques of information security management; ability to deploy and monitor information security systems, while detecting, controlling and preventing violations of IT security.
Prior experience with external auditing
Previous experience with a Big Four consulting firm
Ability to fluently speak Spanish or Portuguese

Responsibilities

Execute an established A&A cybersecurity and compliance vision by translating strategy into operating processes, evidence, metrics, and sustained outcomes.
Lead the A&A security governance, risk, and compliance program across the product lifecycle.
Ensure alignment with key cybersecurity and quality standards, including CRA, IEC 62443, ISO 27001, and ISO 9001.
Translate regulatory and standards requirements into clear, actionable expectations for engineering and product teams.
Establish consistent, auditable security and compliance evidence for new products, sustaining engineering, and fielded systems.
Coordinate internal and external audits, manage audit findings, and drive corrective actions to closure.
Serve as the primary owner for security and quality controls and maintain defensible compliance posture.
Lead CRA readiness activities, including secure‑by‑design documentation, vulnerability management, SBOM requirements, and regulatory interpretation.
Drive adoption of IEC 62443 secure development lifecycle practices and support design reviews for compliance risks.
Manage risk acceptance, deviations, and exceptions, providing documented risk decisions and escalation support.
Lead responses to customer and third‑party security questionnaires, audits, and assessments.
Ensure customer security assurances are accurate, consistent, and reflective of actual product posture.
Define and maintain KPIs related to regulatory readiness, audit posture, and customer security risk trends.
Deliver executive‑level reporting and insights to support leadership decision‑making.
Lead, mentor, and develop a small team of security and compliance professionals.
Collaborate cross‑functionally with Engineering, Product, Legal, Privacy, Quality, and Enterprise Security to drive consistent compliance outcomes.