IAM Governance & Compliance Lead

Career Area:

Technology, Digital and Data

Job Description:

Your Work Shapes the World at Caterpillar Inc.

When you join Caterpillar, you're joining a global team who cares not just about the work we do – but also about each other.  We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

IAM Governance & Compliance Lead

Role Definition:

The role of the governance lead within the Identity Access Management (IAM) organization of Caterpillar Cybersecurity is responsible for the governance and compliance for all IAM services. This includes the management of all policies and procedures related to compliance with the Caterpillar IT governance controls, SOX controls, CMMC, SOC2, ISO27001, etc. The position requires a strong ability to communicate the business value of IAM governance projects with business users and customers. Excellent people skills require managing sensitive issues, developing others, or influencing others inside and outside the department to take specific actions.

What You Will Do:

• Lead a team of governance practitioners to set priorities and drive execution.

• Function as sponsor and engage in chartering and execution of governance related IAM projects.

• Support the Caterpillar enterprise in compliance with Caterpillar IT Access Controls.

• Champion IAM key projects with Caterpillar leaders.

• Facilitate the creation or update of IAM governance roadmaps and strategies.

• Leverage understanding of customer experience (CX) skills in the evaluation and governance of the IAM services.

• Drive customer learning to enhance understanding of IAM services.

• Function as a trusted advisor to the enterprise on identity and access related topics.

• Oversee ITSM demand management and IAM demand intake

What You Have:

• Strong writing, communication, and presentation skills; ability to deliver messages to technical and non-technical audiences.

• Ability to balance customer experience and IT governance.

• High Level of customer focus with professional communication skills.

• Demonstrated quick and clear decision-making skills in a collaborative environment, strong people management with a focus on developing others.

• Initiative-taker with strong technical leadership skills and business acumen.

• Ability to think broadly and strategically balanced with high diligence.

• Excellent organizing, time management, and priority setting skills.

• Effective relationship building and influencing skills.

• Experience from prior roles where project management and project leadership were core functions/components of the position.

• Demonstrated ability to drive multiple projects simultaneously to successful completion with on time delivery.

• Strong analytical and critical thinking skills.

Skills Descriptors:

• Communicating Complex Concepts: Knowledge of effective presentation tools and techniques to ensure clear understanding; ability to use summarization and simplification techniques to explain complex technical concepts in simple, understandable language appropriate to the audience.

• Consulting: Knowledge of techniques, roles, and responsibilities in providing technical or business guidance to clients, both internal and external; ability to apply consulting knowledge appropriately.

• Information Security Management: Knowledge of the processes, tools, and techniques of information security management; ability to deploy and monitor information security systems, while detecting, controlling, and preventing violations of IT security.

• Cybersecurity Standards and Policies: Knowledge of developing cybersecurity policies, standards, and procedures; ability to develop and communicate policies, standards and procedures that guide interactions with customers.

• Cybersecurity Risk Management: Knowledge of tools, techniques, approaches, and processes of cybersecurity risk management; ability to ensure organizational network operation and minimize negative effects by cybersecurity risks.

• Information Technology (IT) Security Policies: Knowledge of IT security policies, standards, and procedures; ability to utilize a variety of administrative skill sets and technical knowledge to ensure cyber security c