Senior Third-Party Cyber Security Risk Analyst

Toyota North America • Plano, TX

9d

About The Position

Toyota Financial Services (TFS) is seeking a passionate and highly motivated Senior Third-Party Cybersecurity Risk Analyst to join their Cyber Risk Department. This role is crucial for conducting cybersecurity risk assessments of third-party vendors to evaluate their risk profile and the effectiveness of their risk management capabilities, ensuring alignment with Toyota's risk appetite. The analyst will review assurance artifacts like SOC reports, ISO 27001, and PCI DSS certifications, consolidate and communicate risk findings to leadership, and collaborate with internal stakeholders to improve third-party cybersecurity risk processes. The ideal candidate will possess strong analytical, critical thinking, and communication skills, with a deep understanding of risk management, cybersecurity processes, risks, and controls.

Requirements

• A bachelor's degree in computer science, information technology, or a related field.
• Experience in Information Security, Risk Management, Information Technology, or related disciplines.
• Experience in the planning, designing, implementation, and execution of third-party risk management programs.
• Excellent presentation skills, including verbal and written communication to differing levels of management throughout the organization.
• Excellent “soft” skills including relationship building and the ability to influence others through consensus building.
• Must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment now or in the future.

Nice To Haves

• Certified Information Systems & Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Security Auditor (CISA) certifications.

Responsibilities

• Conduct third-party cybersecurity risk assessments to verify alignment with Toyota’s information security and risk management standards.
• Review and analyze independent assurance artifacts, including SOC 1, SOC 2, ISO 27001 certifications, PCI DSS certifications, and related evidence, to validate control design and operating effectiveness.
• Consolidate, interpret, and communicate cybersecurity risk metrics, trends, and findings to operational stakeholders and executive leadership.
• Partner with internal business, security, and risk teams to support informed third-party risk decisions and remediation efforts.
• Support continuous improvement of third-party risk processes, methodologies, and reporting practices.

Benefits

• A work environment built on teamwork, flexibility and respect
• Professional growth and development programs
• Tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• Relocation assistance (if applicable)

What This Job Offers

• Job Type: Full-time
• Career Level: Senior