Senior Cybersecurity Analyst (Cybersecurity Advisor)

Caterpillar Inc.; Bengaluru; On-site; INR 1,500,000 - 2,000,000; Full time

Job summary

Caterpillar Inc. seeks a Senior Cybersecurity Analyst (Cybersecurity Advisor) to join the AP Cybersecurity - CAT IT Division. This role serves as a trusted advisor to business and technology stakeholders, driving regional cybersecurity governance, risk management, security assessments, compliance programs, and advisory services across the organization.

The preference for this role is to be based out of Bangalore — Caterpillar PSN, with a 5-day workweek and IST 01:00-10:00 PM shift timing.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Information Technology, Engineering, or a related field.
• Minimum 5+ years of experience in cybersecurity, information security, IT risk management, security consulting, or related areas.
• Strong knowledge of at least two cybersecurity domains: governance, risk, IAM, cryptography, network security, SSDLC, cloud security, security architecture, business continuity, operations, regulatory compliance.
• Demonstrated ability to perform security assessments, risk evaluations, and security consulting engagements.
• Strong communication, stakeholder management, and presentation skills.

Responsibilities

• Serve as a trusted cybersecurity advisor to business leaders and technology stakeholders.
• Lead security governance, risk management, assessments, and compliance activities.
• Review security architecture of new applications and cloud solutions; evaluate third‑party services.
• Coordinate vulnerability assessments, risk evaluations, and remediation planning.
• Support CSIRT activities and security awareness initiatives.

Skills

Governance

Risk management

IAM

Cloud security

SSDLC

Education

Bachelor’s degree in CS/IS/Engineering

Job description

Career Area

Technology, Digital and Data

Job Description

Your Work Shapes the World at Caterpillar Inc.

When you join Caterpillar, you’rejoining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don’tjust talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

About Caterpillar

Caterpillar Inc. is the world’s leading manufacturer of construction and mining equipment, off-highway diesel and natural gas engines, industrial gas turbines and diesel-electric locomotives.

For nearly 100 years, we’ve been helping customers build a better, more sustainable world and are committed and contributing to a reduced-carbon future. Our innovative products and services, backed by our global dealer network, provide exceptional value that helps customers succeed.

Your Impact Shapes the World at Caterpillar Inc

When you join Caterpillar, you’re joining a global team who cares not just about the work we do – but also about each other. We are the makers, problem solvers and future world builders who are creating stronger, more sustainable communities. We don’t just talk about progress and innovation here – we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

Job Summary

We are seeking an Senior Cybersecurity Analyst (Cybersecurity Advisor) to join our AP Cybersecurity - CAT IT Division to serve as a trusted advisor to business and technology stakeholders. This role is responsible for driving regional cybersecurity governance, risk management, security assessments, compliance programs, and security advisory services across the organization. The successful candidate will help ensure that cybersecurity risks are effectively identified, communicated, and managed while enabling business innovation in a secure and compliant manner.

The preference for this role is to be based out of Bangalore – Caterpillar PSN.

This position requires candidate to work a 5-day -a -week schedule

This position requires candidate to work a 5-day -a -week schedule.

Shift Timing : 01:00-10:00PM IST

Position Summary

The OpenVMS Systems Administrator is responsible for the administration, maintenance, monitoring, and support of mission-critical OpenVMS environments supporting warehouse automation, parts distribution, and manufacturing applications across multiple global locations. This role provides operational support for both physical OpenVMS Integrity servers and emulated OpenVMS environments hosted on Vere Technologies virtual servers, ensuring high availability, system performance, security, and business continuity for critical enterprise applications.

Security Advisory & Risk Management

• Serve as a trusted cybersecurity advisor to business leaders, project teams, and technology stakeholders.
• Provide expert guidance on cybersecurity objectives and compliance with corporate security policies, industry standards, and regulatory requirements.
• Communicate complex cybersecurity risks, vulnerabilities, and recommendations in a clear and actionable manner to both technical and non-technical audiences.
• Support business decision-making by balancing security requirements with operational and business objectives.

Security Governance & Compliance

• Conduct security assessments, compliance reviews, and risk evaluations to ensure adherence to established security frameworks and standards.
• Evaluate the effectiveness of cybersecurity controls and recommend enhancements where necessary.
• Produce high-quality security assessment reports and communicate findings to stakeholders in a timely manner.
• Support internal and external audit activities and regulatory compliance initiatives.

Security Architecture & Solution Review

• Review and advise on the security architecture of new applications, infrastructure projects, cloud solutions, and outsourced services.
• Evaluate purchased products, internally developed solutions, and third‑party services through established cybersecurity processes, including:
  • Software Asset Management (SAM)
  • Secure Configuration Baselines (SCB)
  • Third‑Party Cyber Risk Assessment (TPCRA)
  • Secure Development and Security Review Processes
• Recommend security controls and best practices aligned with enterprise security standards.

Vulnerability & Risk Remediation Management

• Coordinate and support vulnerability assessments, risk assessments, and control reviews.
• Partner with risk owners to develop and track remediation plans and ensure risks are managed according to the Risk Treatment Plan (RTP) process.
• Monitor remediation progress and provide regular reporting to management.

Incident Response & Security Operations Support

• Support Cybersecurity Incident Response Team (CSIRT) activities when required.
• Coordinate cybersecurity incident investigation and response efforts within assigned business areas.
• Ensure timely communication and escalation of security incidents and emerging risks.

Security Awareness & Education

• Support the organization’s Cybersecurity Awareness Program.
• Deliver security awareness activities, phishing simulation campaigns, and targeted security communications.
• Develop and present cybersecurity messages aligned with enterprise security directives.
• Promote a strong security culture across the organization.

Continuous Improvement

• Stay current with evolving cybersecurity threats, technologies, regulations, and industry best practices.
• Research emerging security standards, frameworks, and technologies, and assess their applicability within the organization.
• Contribute to the continuous improvement of cybersecurity processes, policies, and controls.

Other

• Travel may be required based on business needs.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Security, Information Technology, Engineering, or a related field.
• Minimum 5+ years of experience in cybersecurity, information security, IT risk management, security consulting, or related areas.
• Strong knowledge of at least two or more of the following cybersecurity domains:
  • Information Security Governance
  • Risk Management and Compliance
  • Identity and Access Management (IAM)
  • Cryptography and Data Protection
  • Network and Communication Security
  • Secure Software Development Lifecycle (SSDLC)
  • Cloud Security
  • Security Architecture
  • Business Continuity and Disaster Recovery
  • Security Operations and Incident Response
  • Regulatory and Legal Compliance
• Demonstrated ability to perform security assessments, risk evaluations, and security consulting engagements.
• Strong communication, stakeholder management, and presentation skills.