Domain Risk Lead - Banking & Commercial Lending

Toyota Deutschland GmbH; Plano (TX); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Health care and wellness plans

401(k) with company match

Tuition reimbursement

Relocation assistance

Job summary

Toyota Deutschland GmbH is seeking a Domain Risk Lead to advance IT and data risk management within the enterprise. You will ensure COBIT/NIST/ISO 27001 alignment, oversee risk assessments, and integrate risk practices into ERM. You will drive risk reporting and provide guidance to senior stakeholders.

Reporting to the National Manager of Domain Risk Leads, this role requires strong analytical skills and experience in governance, risk, and compliance across enterprise technology environments.

Qualifications

• Bachelor's degree in BA or BS required.
• 7+ years IT risk management, audit, or cybersecurity experience.
• Strong analytical and problem-solving abilities.
• Experience with enterprise technology and data risk management.
• Familiarity with COBIT, NIST, ISO 27001 frameworks.
• Experience with SOX and FFIEC requirements.
• Knowledge of ITGCs, IT controls, and CI/CD practices.

Responsibilities

• Own and govern the domain risk management framework aligned with enterprise risk appetite.
• Maintain a comprehensive risk register and ensure timely action on risks.
• Develop risk mitigation strategies to reduce exposure.
• Ensure adherence to internal policies and regulatory requirements.
• Lead domain risk incident oversight and root-cause analysis.
• Evaluate controls and recommend improvements to strengthen the environment.
• Lead annual technology risk assessments and deliver actionable findings.
• Provide concise risk reporting to senior leadership.
• Advise senior stakeholders to promote a risk-aware culture.

Skills

Domain risk governance

Risk analysis

COBIT/NIST/ISO 27001

GRC systems

SOX/FFIEC

Security best practices

Education

Bachelor's degree in BA or BS

Masters preferred

Tools

Archer GRC

Job description

Overview

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, 'job flexibility benefits' [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who we’re looking for

Reporting to the National Manager, Domain Risk Leads, the Domain Risk Lead will play a critical role in advancing the IT Risk department’s mission by executing established risk assessment frameworks for IT and Data Risk. This includes ensuring alignment with COBIT and other recognized IT and Data Management standards, while integrating these practices into the broader Enterprise Risk Management (ERM) framework. Through proactive risk oversight and governance, the Domain Risk Leader is accountable for ensuring that technology releases meet quality expectations and that any residual risks are clearly articulated, enabling informed decision-making across the business.

What you’ll be doing

• Own and govern the domain risk management framework in alignment with enterprise risk appetite, strategic priorities, and business objectives.
• Direct the maintenance of a comprehensive, continuously updated risk register, ensuring risks are accurately documented, tracked, and actioned.
• Develop and implement risk mitigation strategies that materially reduce exposure to the organization and embed risk management into core business operations.
• Ensure adherence to internal policies, organizational standards, and applicable regulatory and control requirements.
• Lead oversight of domain risk incidents, root cause analysis, corrective actions, and remediation tracking to closure.
• Evaluate the design and effectiveness of controls and recommend enhancements to strengthen the control environment.
• Lead annual technology risk assessments and ensure outcomes are actionable, risk-based, and aligned to business and enterprise expectations
• Deliver concise, high-impact risk reporting and executive communications to senior leadership on key risks, findings, trends, and remediation progress.
• Serve as a trusted advisor to senior stakeholders, influencing decisions and promoting a strong risk-aware culture across the domain.

What you bring

• Bachelor's degree in BA or BS
• 7+ years of experience in IT risk management, audit, or cybersecurity experience
• Strong analytical and problem-solving abilities
• Experience with managing risk for enterprise technology and data
• Deep understanding of risk frameworks such as COBIT, NIST, and ISO 27001
• Implementation and/or use of GRC systems
• Experience with operational risk management and/or auditing, Sarbanes Oxley, (SOX), FFIEC requirements
• Familiarity with security best practices for enterprise systems, including encryption, access control, and monitoring
• Working knowledge or the principles of technology and data risk management including ITGCs, IT application controls, GLBA, Information Security, Release Management, CI/CD, control design, and testing within complex enterprise data environments
• Banking Regulations and Industry Frameworks preferably working in a banking institution

Added bonus if you have

• Masters or graduate degree
• 10+ years of experience in IT risk management, audit, or cybersecurity experience
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Risk in Risk and Information Systems Control (CRISC)
• Prior working experience using Archer GRC
• Experience implementing/designing controls related to AI or Cloud technology

What we’ll bring

During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:

• A work environment built on teamwork, flexibility, and respect
• Professional growth and development programs to help advance your career, as well as tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• Relocation assistance (if applicable)

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star.

Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.