Senior Analyst, Cyber Risk Assurance
About The Position
Toyota Financial Services’ Cyber Risk Department is seeking a Senior Cyber Risk Assurance Analyst to design, manage, and mature its Information Security Governance, Risk, and Compliance (GRC) program. The role works with leaders across Information Security, Data and Technology, Legal, Privacy, and other areas to establish and mature the program and supporting processes. It requires broad knowledge of Information Security processes and a strong understanding of industry frameworks such as NIST CSF, ISO 27001, and PCI DSS, as well as regulatory requirements such as Sarbanes-Oxley and FFIEC. The position develops cybersecurity governance strategy, maintains policies and standards, supports security-related audits and assessments, manages remediation of findings, produces risk and compliance dashboards, and oversees cybersecurity governance tools and technologies. Toyota states that it does not provide employment-based visa or work authorization sponsorship for this role; applicants must be authorized to work in the United States without Toyota’s current or future support.
Requirements
- Bachelor’s degree in computer science, information technology, or a related field.
- Four to six years of experience in IT audit and/or cybersecurity roles.
- Strong background in cybersecurity frameworks, strategy, standards, and regulations.
- Ability to influence and build relationships with line-of-business stakeholders, technology leadership, and internal and external partners.
- Strong project management, writing, and organizational abilities.
- Experience conducting Information Security risk assessments.
Nice To Haves
- Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Security Auditor (CISA) certification.
- Progressive work experience in a similar field and/or industry.
Responsibilities
- Develop and implement a cybersecurity governance strategy aligned with organizational goals, risk management, regulatory needs, and industry best practices.
- Create, update, and enforce cybersecurity policies, standards, and processes to support compliance with regulations and industry standards.
- Monitor changes to existing and emerging regulations and industry guidance applicable to Toyota companies, and provide timely guidance on potentially impactful changes.
- Liaise with stakeholders to support security-related regulatory and statutory audits and assessment activities.
- Manage remediation of audit and assessment findings by working with Information Security leaders and other stakeholders to develop remediation plans and ensure countermeasures are implemented on time.
- Develop and manage risk and compliance dashboards tailored to audiences such as management and executives, communicating risks and mitigation strategies.
- Oversee the selection, implementation, and management of cybersecurity governance tools and technologies.
Benefits
- Professional growth and development programs
- Tuition reimbursement
- Team Member Vehicle Purchase Discount
- Toyota Team Member Lease Vehicle Program (if applicable)
- Comprehensive health care and wellness plans for the entire family
- Toyota 401(k) Savings Plan with a company match and an annual retirement contribution, whether or not the employee contributes (if applicable)
- Paid holidays and paid time off
- Referral services related to prenatal services, adoption, childcare, schools, and more
- Tax-advantaged accounts, including Health Savings Account, Health Care FSA, and Dependent Care FSA
- Relocation assistance (if applicable)
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
