Senior Cyber Risk Assurance Analyst

Toyota North America • Plano, TX

6d

About The Position

Toyota Financial Services (TFS) is seeking a passionate and highly motivated Senior Cyber Risk Assurance Analyst to join their Cyber Risk Department. The primary responsibility of this role is to design, manage, and mature the Information Security Governance, Risk, and Compliance (GRC) program. This role involves engaging with leaders across various departments, including Information Security, Data and Technology, Legal, and Privacy, to establish and enhance the GRC program and its supporting processes. The ideal candidate will possess broad knowledge of Information Security processes and a strong understanding of industry frameworks such as NIST CSF, ISO 27001, and PCI DSS, as well as regulatory requirements like Sarbanes-Oxley and FFIEC.

Requirements

• Bachelor's degree in computer science, information technology, or a related field.
• Proven experience (4-6 years) in IT audit and/or cybersecurity roles.
• Strong background in cybersecurity frameworks, strategy, standards, and regulations.
• Strong ability to influence and build relationships with LOB stakeholders, technology leadership, internal, and external partners.
• Strong project management, strong writing proficiency, and organizational abilities.
• Experience conducting Information Security risk assessments.
• Must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment now or in the future.

Nice To Haves

• Certified Information Systems & Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Security Auditor (CISA) certifications.
• Progressive work experience in a similar field and/or industry.

Responsibilities

• Develop and implement a comprehensive cybersecurity governance strategy aligned with organizational goals, risk management, regulatory needs, and industry best practices.
• Create, update, and enforce cybersecurity policies, standards, and processes to ensure compliance with regulations and industry standards.
• Stay current with changes to existing regulations and newly emerging regulations or industry guidance applicable to Toyota companies and provide timely guidance regarding potentially impacting changes.
• Liaise with stakeholders to support security-related regulatory and statutory audit and assessment activities.
• Manage the remediation of audit and assessment findings by partnering closely with Information Security leaders and other stakeholders to develop remediation plans and ensuring the countermeasures are in place on a timely basis.
• Develop and manage clear risk and compliance dashboards, tailored to different audiences (management, executives, etc.), to communicate risks and mitigation strategies.
• Oversee the selection, implementation, and management of cybersecurity governance tools and technologies.

Benefits

• A work environment built on teamwork, flexibility, and respect
• Professional growth and development programs
• Tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• Relocation assistance (if applicable)

What This Job Offers

• Job Type: Full-time
• Career Level: Senior