Information Security Analyst

Toyota Motor Corporation

2d•CA$82,000 - CA$105,000•Hybrid

About The Position

This role will provide security guidance to business and service partners, identify and prioritize security- related requirements and facilitate delivery of information security services. The successful candidate will be responsible for protecting TFS information security assets by identifying, assessing, and mitigating security risks. This role supports security operations, vulnerability management, third party risk, and security governance activities while working closely with management to support and ensure compliance to prescribed risk mitigating policies and procedures. Acting as an Information Security ambassador to the business, this role determines security requirements by evaluating business initiatives and requirements, ensuring alignment to Toyota’s Global Information Security Standards. This role will be reporting to the Manager, Information Security.

Requirements

5+ years’ experience as an information security analyst, preferably in the Banking or Financial services industry
Post-secondary education in Computer Science/Engineering or related field
Experience working with: Vulnerability management tools (e.g., Qualys)
IAM tools (e.g., SailPoint, Okta)
Endpoint security tools (e.g., CrowdStrike)
Privilege Access Management tools (e.g. CyberArk)
Understanding of: Network security concepts (firewalls, VPNs, segmentation, zero trust)
Cloud security fundamentals (Azure, AWS)
Authentication methods (MFA, SSO)
DLP
SDLC processes
API security
Strong analytical and problem-solving skills
Excellent written and verbal communication
Ability to translate technical risks into business terms
Detail-oriented with strong documentation skills
Ability to manage multiple priorities in a fast-paced environment

Nice To Haves

Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Information Systems Security Architecture Professional (ISSAP), AWS Certified Security Specialty and/or Certified Cloud Security Knowledge (CCSK)

Responsibilities

Monitor and act on security alerts and advisories from the SOC team and other security tools
Perform triage, investigation, and escalation of security incidents
Support incident response activities
Stay informed on emerging threats, vulnerabilities, and attack techniques
Review vulnerability reports, assess exploitability of vulnerabilities, and coordinate remediation efforts
Support access governance processes, including access reviews, least privilege, and segregation of duties
Investigate access anomalies and unauthorized access attempts
Perform risk assessments of information systems and infrastructure; then develop and communicate mitigation recommendations.
Conduct security risks assessments of vendors and service providers, including review of SOC2 reports and other security documentation
Track remediation of identified third-party risks
Support internal and external audits
Maintain and update security policies, standards, and procedures, and security training materials
Develop and maintain dashboards to track and report on key risks and compliance metrics
Prepare documentation and reporting materials for management
Support regular business continuity planning and disaster recovery initiatives
Identify and communicate current and emerging security threats to Senior Management
Collaborate with business units, application teams, and service partners to define and guide security controls that manage risk.
Support phishing simulations and annual security awareness campaigns.
Work with internal teams and affiliates on IT projects and act as a liaison with Toyota’s Global Information Security Group (GISG)