Domain Risk Lead - Banking & Commercial Lending

Toyota North America•Plano, TX

12d

About The Position

Reporting to the National Manager, Domain Risk Leads, the Domain Risk Lead will play a critical role in advancing the IT Risk department’s mission by executing established risk assessment frameworks for IT and Data Risk. This includes ensuring alignment with COBIT and other recognized IT and Data Management standards, while integrating these practices into the broader Enterprise Risk Management (ERM) framework. Through proactive risk oversight and governance, the Domain Risk Leader is accountable for ensuring that technology releases meet quality expectations and that any residual risks are clearly articulated, enabling informed decision-making across the business.

Requirements

Bachelor's degree in BA or BS
7+ years of experience in IT risk management, audit, or cybersecurity experience
Strong analytical and problem-solving abilities
Experience with managing risk for enterprise technology and data
Deep understanding of risk frameworks such as COBIT, NIST, and ISO 27001
Implementation and/or use of GRC systems
Experience with operational risk management and/or auditing, Sarbanes Oxley, (SOX), FFIEC requirements
Familiarity with security best practices for enterprise systems, including encryption, access control, and monitoring
Working knowledge or the principles of technology and data risk management including ITGCs, IT application controls, GLBA, Information Security, Release Management, CI/CD, control design, and testing within complex enterprise data environments
Banking Regulations and Industry Frameworks preferably working in a banking institution

Nice To Haves

Masters or graduate degree
10+ years of experience in IT risk management, audit, or cybersecurity experience
Certified Information Systems Auditor (CISA)
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
Certified Risk in Risk and Information Systems Control (CRISC)
Prior working experience using Archer GRC
Experience implementing/designing controls related to AI or Cloud technology

Responsibilities

Own and govern the domain risk management framework in alignment with enterprise risk appetite, strategic priorities, and business objectives.
Direct the maintenance of a comprehensive, continuously updated risk register, ensuring risks are accurately documented, tracked, and actioned.
Develop and implement risk mitigation strategies that materially reduce exposure to the organization and embed risk management into core business operations.
Ensure adherence to internal policies, organizational standards, and applicable regulatory and control requirements.
Lead oversight of domain risk incidents, root cause analysis, corrective actions, and remediation tracking to closure.
Evaluate the design and effectiveness of controls and recommend enhancements to strengthen the control environment.
Lead annual technology risk assessments and ensure outcomes are actionable, risk-based, and aligned to business and enterprise expectations.
Deliver concise, high-impact risk reporting and executive communications to senior leadership on key risks, findings, trends, and remediation progress.
Serve as a trusted advisor to senior stakeholders, influencing decisions and promoting a strong risk-aware culture across the domain.

Benefits

A work environment built on teamwork, flexibility, and respect
Professional growth and development programs to help advance your career, as well as tuition reimbursement
Team Member Vehicle Purchase Discount
Toyota Team Member Lease Vehicle Program (if applicable)
Comprehensive health care and wellness plans for your entire family
Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
Paid holidays and paid time off
Referral services related to prenatal services, adoption, childcare, schools and more
Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
Relocation assistance (if applicable)