Third-Party Cybersecurity Risk Manager

Role Overview

• Deliver cybersecurity expertise and leadership for the advancement, execution and sustainability of the Third-Party Cybersecurity Risk Management program, processes and supporting tools
• Effectively lead and motivate a team of 4-15 resources to perform to their highest potential by serving as a strong leader and role model
• Effectively balance cyber hygiene, day-to-day operations, incremental improvement, and future-focused projects in a manner which reduces risk and facilitates enterprise efforts to achieve expanded offerings, services growth, and sustainability
• Manage project planning and execution covering project charters, communications, metrics, reporting, and the overall project plan with timelines and deliverables
• Review cybersecurity language within legal contracts to ensure alignment with enterprise requirements
• Establish appropriate goals and objectives for the team in alignment with the Cybersecurity strategy and in support of overall organizational goals
• Foster collaborative working relationships with security stakeholders across Caterpillar and guide the team to provide exceptional customer experience
• Ensure third party assessment data integrity and quality control
• Regularly review and gain insights from data and metrics
• Increase awareness, understanding and integration of the program into enterprise supply chain risk management efforts

Requirements

• Bachelor’s degree from an accredited institution
• Active, nationally recognized cybersecurity certifications (CTPRP, CISSP, CISM, CRISC)
• Demonstrated ability in leading a team
• Strong knowledge and practical application of third-party risk management concepts (e.g. industry standard TPRM security control questionnaires, SOC2 Type 2, etc.)
• Proven project management experience with multiple concurrent projects
• Ability to adjust to multiple demands, changing priorities, ambiguity, and rapid change, while multitasking effectively
• Process-oriented and strong organizational skills
• Excellent written and verbal communication with ability to explain complex issues to technical and non-technical users across the enterprise
• Strong collaboration and coordination skills
• Strong analytical and critical thinking skills
• Ability to interact effectively with senior management

Tech Stack

• Cyber Security

Benefits

• Medical, dental, vision benefits*
• Paid time off plan (Vacation, Holidays, Volunteer, etc.)*
• 401(k) savings plans*
• Health Savings Account (HSA)*
• Flexible Spending Accounts (FSAs)*
• Health Lifestyle Programs*
• Employee Assistance Program*
• Voluntary Benefits and Employee Discounts*
• Career Development*
• Incentive bonus*
• Disability benefits
• Life Insurance
• Parental leave
• Adoption benefits
• Tuition Reimbursement