Insider Risk Management Lead

Toyota North America•Plano, TX

About The Position

Overview Who we are Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us. An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment. To save time applying, Toyota does not offer sponsorship of job applicants for employment-based visas or any other work authorization for this position at this time. Who We’re Looking For Toyota Financial Services (TFS) Technology team is looking for a highly motivated person to fill a role as Insider Risk Management Lead. Your primary responsibility is to proactively identify, assess, mitigate, and deter risks arising from employee and contractor activity. Operating under the Information Security mandate, you will lead complex insider risk investigations and drive cross-functional remediation with Legal, HR, and Security to reduce organizational risk. We’re looking for someone who thrives in a high-growth environment and brings deep technical expertise alongside strong awareness of the cyber threat landscape – enabling you to detect, investigate, and contain insider threats with precision and discretion.

Requirements

5+ years of experience in cyber security: anomaly detection, Security Operations Center (SOC) detection and engineering, Data Loss Prevention (DLP), threat hunting and analytics, security incident and event management (SIEM), and incident response.
Subject matter expertise in one or more IRM technologies (e.g., EUBA, EDR, Email DLP, Cloud DLP, etc.)
Strong understanding of the insider threat landscape, investigation and risk assessment methodologies, chain of custody requirements, and data protection regulations.
Excellent communication skills with the ability to influence stakeholders at all levels.

Nice To Haves

A bachelor’s degree in a relevant field (e.g., Cybersecurity, Computer Science, Engineering, Risk Management) or equivalent work experience.
Experience in a regulated industry (e.g., finance, healthcare, government)
Proficiency in programing and query languages (e.g., PowerShell, Python, SQL, Yara, FQL, KQL, EQL, SPL)
Familiarity with data loss prevention (DLP) and user behavior analytics (UBA)
Proficiency in AWS and Azure cloud environments, with a strong understanding of data flows and access management
Experience in threat detection, incident response, and root-cause analysis in cloud environments.
Familiarity with eDiscovery and litigation processes.

Responsibilities

Threat Detection & Analysis: Continuously monitor and assess security alerts generated by insider threat detection systems across on-prem, cloud, and endpoint environments. Analyze system logs, network traffic, authentication records, and application data to identify potential threats.
Detection Engineering: Design and implement detection rules, scripts, and algorithms to identify anomalous user behaviors indicative of insider threats. Apply advanced correlation techniques to link suspicious activities across multiple data sources and build comprehensive threat narratives.
Investigation Leadership & Response: Serve as senior analyst during insider threat investigations, coordinating containment and remediation efforts with Legal, HR, and cyber defense teams. Ensure timely and effective resolution of complex cases.
Process Development & Standardization: Assist in the development and maintenance of standard operating procedures (SOPs) and playbooks that streamline alert triage, investigation, and escalation processes. Continuously refine workflows to improve efficiency and consistency.

Benefits

A work environment built on teamwork, flexibility, and respect.
Professional growth and development programs to help advance your career, including tuition reimbursement.
Team Member Vehicle Purchase Discount.
Toyota Team Member Lease Vehicle Program (if applicable).
Comprehensive health care and wellness plans for your entire family.
Toyota 401(k) Savings Plan with a company match, plus an annual retirement contribution from Toyota regardless of your own contributions.
Paid holidays and paid time off.
Referral services for prenatal services, adoption, childcare, schools, and more.
Tax advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
Relocation assistance (if applicable).