TFSB Information Security Risk Manager
About The Position
The Toyota Financial Savings Bank is seeking an Information Security Risk Manager to own and manage its enterprise-wide Cyber Risk Management Framework (RMF). Reporting to the TFSB Chief Information Security Officer (CISO), the role establishes structured, repeatable, and transparent cyber risk management processes across the bank. The manager serves as the central authority for cyber risk management, working with senior leadership, internal audit, regulators, system owners, IT teams, and security functions to support program effectiveness and build a mature, risk-aware culture. The role is responsible for developing and maintaining cyber risk policies, standards, procedures, and methodologies based on the NIST Risk Management Framework. It leads the cyber risk lifecycle for in-scope systems, oversees system authorization and the security control catalog, and establishes continuous monitoring. The manager also administers the GRC platform and provides leadership with KPIs and KRIs on the enterprise risk landscape.
Requirements
- Minimum 7 years of experience in Information Security, IT Audit, or Technology Risk Management.
- At least 3 years in a program management or leadership capacity.
- Core understanding of banking-specific Information Technology and Security regulations, including deep familiarity with FDIC and FFIEC Examination Handbooks.
- Demonstrable expertise developing and implementing risk management frameworks, specifically NIST Risk Management Framework (NIST 800-37).
- In-depth knowledge of security control frameworks, particularly NIST 800-53.
- Strong understanding of FFIEC, GLBA, and SOX and their applicability to technologies and applications.
- Ability to engage with and present complex security risk concepts to executive leadership to encourage prioritization and drive decision-making.
- Bachelor’s degree from an accredited institution, or equivalent professional experience.
- Must have the right to work in the United States without current or future Toyota immigration support or sponsorship.
Nice To Haves
- Relevant security certification such as CGRC, CRISC, CISSP, or CISM.
- Hands-on experience building a risk management program from the ground up.
- Experience implementing or serving as the primary administrator for a GRC platform, such as ServiceNow GRC or Archer.
- Advanced degree with a concentration in an IT- or Cybersecurity-related area.
Responsibilities
- Develop, document, and maintain cyber risk management policies, standards, procedures, and methodologies based on the NIST Risk Management Framework.
- Lead the cyber risk management lifecycle for in-scope information systems, including system categorization, security control selection, implementation guidance, and effectiveness assessments.
- Manage the formal system authorization process, preparing risk-based recommendations and authorization packages for senior leadership review and approval.
- Oversee the bank's master security control catalog and keep it current with emerging threats and regulatory requirements.
- Establish and mature a continuous monitoring strategy to ensure systems maintain an acceptable security posture.
- Administer and configure the Governance, Risk, and Compliance (GRC) platform supporting the RMF program.
- Develop and report Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) to give leadership visibility into enterprise risk.
- Act as the primary liaison among system owners, IT teams, and security functions to facilitate risk assessments and track remediation activities.
- Interface with senior leadership, internal audit, and regulators regarding the cyber risk management program.
Benefits
- Professional growth and development programs.
- Tuition reimbursement.
- Team Member Vehicle Purchase Discount.
- Toyota Team Member Lease Vehicle Program, if applicable.
- Comprehensive health care and wellness plans for the entire family.
- Toyota 401(k) Savings Plan with company match and an annual retirement contribution, if applicable.
- Paid holidays and paid time off.
- Referral services related to prenatal services, adoption, childcare, schools, and more.
- Tax-advantaged accounts, including Health Savings Account, Health Care FSA, and Dependent Care FSA.
- Relocation assistance, if applicable.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
