TFSB Information Security Risk Manager

Toyota•Plano, TX

About The Position

Toyota Financial Services (TFS) is seeking an Information Security Risk Manager for the Toyota Financial Savings Bank (TFSB). This role reports to the TFSB Chief Information Security Officer (CISO) and is responsible for building, implementing, and managing the bank's enterprise-wide Cyber Risk Management Framework (RMF). The ideal candidate will be a strategic leader capable of establishing a structured, repeatable, and transparent process for managing cyber risk. This individual will serve as the central point of authority for Cyber Risk Management, interacting with senior leadership, internal audit, and regulators to ensure program effectiveness and foster a mature, risk-aware culture.

Requirements

A core understanding of banking-specific Information Technology & Security regulations, including deep familiarity with FDIC and FFIEC Examination Handbooks.
Minimum 7 years of previous experience in Information Security, IT Audit, or Technology Risk Management, with at least 3 years in a program management or leadership capacity.
Demonstrable expertise in developing and implementing risk management frameworks, specifically the NIST Risk Management Framework (NIST 800-37).
In-depth knowledge of security control frameworks, particularly NIST 800-53.
Strong understanding of FFIEC, GLBA, and SOX and their applicability to technologies and applications.
Proven ability to engage with and present complex security risk concepts to executive leadership to encourage prioritization and drive decision-making.
Bachelor’s Degree from an accredited institution, or equivalent professional experience.

Nice To Haves

Relevant security certification (CGRC, CRISC, CISSP, or CISM).
Hands-on experience building a risk management program from the ground up.
Experience implementing or serving as the primary administrator for a GRC platform (e.g., ServiceNow GRC, Archer).
Advanced degree with a concentration in an IT or Cybersecurity-related area.

Responsibilities

Develop, document, and maintain all cyber risk management policies, standards, procedures, and methodologies based on the NIST Risk Management framework.
Lead the execution of the cyber risk management lifecycle for all in-scope information systems, including system categorization, security control selection, implementation guidance, and effectiveness assessments.
Manage the formal system authorization process, preparing risk-based recommendations and authorization packages for senior leadership to review and approve.
Oversee the bank's master security control catalog and ensure it is kept current with emerging threats and regulatory requirements.
Establish and mature a continuous monitoring strategy to ensure systems maintain an acceptable security posture.
Administer and configure the Governance, Risk, and Compliance (GRC) platform that underpins the RMF program.
Develop and report on Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) to provide leadership with a clear view of the enterprise risk landscape.
Serve as the primary liaison between system owners, IT teams, and security functions to facilitate risk assessments and track remediation activities.

Benefits

A work environment built on teamwork, flexibility, and respect
Professional growth and development programs to help advance your career
Tuition reimbursement
Team Member Vehicle Purchase Discount
Toyota Team Member Lease Vehicle Program (if applicable)
Comprehensive health care and wellness plans for your entire family
Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
Paid holidays and paid time off
Referral services related to prenatal services, adoption, childcare, schools and more
Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
Relocation assistance (if applicable)