Cyber Security Program Manager

TCC Toyota Motor Credit Corporation Company; Plano (TX); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health care

Tuition reimbursement

401(k) company match

PTO and holidays

Relocation assistance

Job summary

Toyota is seeking an experienced Project/Program Manager to lead complex cybersecurity initiatives in a fast-moving environment. You will own delivery lifecycle, agile cadence, risk management, and governance across multiple workstreams, coordinating with engineering, operations, compliance, and legal teams.

The role requires 8+ years in PM, 5+ years in cybersecurity programs, strong leadership, and experience with SDLC. Relocation and comprehensive benefits are offered.

Qualifications

• Bachelor’s degree in CS/IT/cybersecurity or related field.
• 8+ years of progressive PM experience in complex environments.
• 5+ years leading cybersecurity or IT program initiatives through the SDLC.
• Strong experience managing multiple programs with executive stakeholders.
• Certifications such as PMP, CISSP, CISM, or CISA preferred.

Responsibilities

• Lead end-to-end delivery lifecycle for cybersecurity initiatives.
• Drive Agile cadence: stand-ups, sprint planning, reviews.
• Manage RAID risks, issues, dependencies and escalation.
• Own budgets across labor, technology, professional services, and vendors.
• Provide executive reporting on scope, schedule, budget, quality, risks.

Skills

Project management

Stakeholder management

Cybersecurity programs

Cross-functional leadership

Communication

Education

Bachelor’s degree in CS/IT/cybersecurity

Master’s degree (bonus)

Tools

Jira

Confluence

Microsoft Project

Power BI

Job description

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, TN, 'job flexibility benefits' (also known as I-140 or Adjustment of Status portability), etc. now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

What you’ll be doing

These are accountabilities you are solely responsible for and will execute daily/weekly:

Project and Program Delivery Execution

Lead the full delivery lifecycle for complex cybersecurity initiatives, including planning, execution, dependency management, milestone tracking, and delivery oversight across multiple workstreams. Ensure committed objectives, timelines, and quality standards are met.

Agile Cadence and Delivery Management

Drive the daily project cadence, including stand- ups, sprint planning, backlog refinement, sprint reviews, and retrospectives. Ensure work is prioritized appropriately, delivery progress is transparent, and impediments are escalated and resolved quickly.

Risk, Issue, and Dependency Management

Proactively identify, document, assess, and manage risks, issues, assumptions, and dependencies using structured frameworks such as RAID logs. Anticipate bottlenecks, implement corrective actions, and maintain delivery momentum across competing priorities.

Budget and Financial Management

Own and manage project and program budgets across all cost categories, including labor, technology, professional services, and vendor spend. Monitor actuals versus forecast, identify variances, and take corrective action to maintain financial alignment.

Executive and Stakeholder Reporting

Provide clear, timely reporting to executive, management, and team-level stakeholders on scope, schedule, budget, quality, risks, and decisions. Maintain dashboards, scorecards, and program communications that support informed decision-making.

Release, Change, and Deployment Coordination

Partner with Release Management and other delivery teams to ensure cybersecurity deliverables move through release and change governance processes successfully. Confirm readiness, manage dependencies, and ensure all artifacts and approvals are aligned with enterprise controls.

Compliance and Governance Oversight

Ensure cybersecurity initiatives are delivered in alignment with applicable regulations, standards, and internal policies such as NIST, GDPR, HIPAA, PCI-DSS, and enterprise control requirements. Partner with GRC, compliance, and risk teams to embed security obligations into execution.

Vendor and Procurement Management

Manage third‑party vendors and service providers to ensure contracted work is delivered on time, within scope, and to quality expectations. Support vendor selection, SOW development, milestone tracking, and performance reviews.

Intake Prioritization and Portfolio Coordination

Own the cybersecurity intake process by triaging, categorizing, and prioritizing incoming requests. Ensure work is aligned to business objectives, strategically sequenced, and appropriately resourced.

Shared Responsibilities

These are areas where you actively participate and drive execution in partnership with other teams or leadership:

Strategic Roadmap Alignment: Partner with leaders across cybersecurity, technology, and business functions to maintain and evolve the cybersecurity product and project roadmap in alignment with enterprise priorities.

Cross-Functional Program Leadership: Lead multiple interdependent cybersecurity initiatives across engineering, architecture, operations, compliance, legal, procurement, and business teams to ensure alignment and execution against shared goals.

Governance and Decision Forums: Establish and operate program governance routines, escalation paths, dependency reviews, and decision-making forums to keep work moving and resolve cross-functional blockers.

Resource and Priority Tradeoff Management: Collaborate with senior stakeholders to evaluate competing demands, resource constraints, sequencing options, and delivery tradeoffs. Provide recommendations that balance business value, risk reduction, and feasibility.

Organizational Alignment: Influence senior leaders and partners across the enterprise to drive clarity, commitment, and accountability for cybersecurity outcomes.

Periodic Responsibilities

These are areas you facilitate on a recurring or as needed basis to support broader organizational maturity:

Process Improvement and Delivery Maturity: Identify and implement improvements to planning, execution, governance, and reporting processes that increase predictability, transparency, and efficiency across cybersecurity programs.

Coaching and Mentorship: Serve as a subject matter resource to project and program teams, sharing best practices and mentoring others on delivery methodology, risk management, and execution discipline.

Tooling and Data Integrity: Use tools such as Jira, Confluence, Microsoft Project, Power BI, and related platforms to manage plans, track progress, and maintain accurate program data and reporting.

Strategic Influence: Influence cybersecurity priorities, sequencing, and long-term planning by surfacing risks, tradeoffs, and investment implications to senior leadership.

Executive Escalation Management: Prepare clear recommendations and decision-support materials for senior stakeholders when issues, conflicts, or tradeoffs require executive attention.

What you bring

We’re looking for candidates who meet the following qualifications:

• Bachelor’s degree in computer science, information technology, cybersecurity, engineering, or a related field, or equivalent experience.
• 8+ years of progressive experience in project or program management, including extensive experience in complex, cross-functional environments.
• 5+ years of experience leading cybersecurity, IT, or technology initiatives through the software development lifecycle.
• Strong experience managing multiple concurrent projects or programs with interdependent deliverables, competing priorities, and executive stakeholders.
• Proven ability to lead planning, execution, budgeting, risk management, and governance for complex technology initiatives.
• Demonstrated success influencing without direct authority and partnering effectively with senior leaders.
• Excellent communication, analytical, organizational, and problem-solving skills.
• Strong judgment and ability to operate independently in fast-moving, ambiguous environments.
• Master’s degree in a related field such as cybersecurity, computer science, engineering, or information technology (bonus).
• Experience leading enterprise cybersecurity programs in regulated industries such as financial services, banking, insurance, or automotive.
• Industry certifications such as CISSP, CISM, CISA, or PMP.
• Experience building or improving cybersecurity operating models, governance mechanisms, or portfolio processes.
• Familiarity with cloud security, identity and access management, vulnerability management, third-party risk, or security architecture programs.

What we’ll bring

During your interview process, we’ll discuss details of our industry-leading benefits and career development opportunities. A few highlights include:

• A work environment built on teamwork, flexibility and respect
• Professional growth and development programs to help advance your career, as well as tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Tax-advantaged accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• Relocation assistance (if applicable)

Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.

Please send an email to [e-mail].