Domain Risk Lead - Banking & Commercial Lending

Toyota North America; Plano (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health care and wellness plans

401(k) Savings Plan with company match

Relocation assistance

Job summary

Toyota North America is seeking a Domain Risk Lead to advance IT risk management and ensure alignment with COBIT, NIST, and ISO 27001 across enterprise technology and data.

You will govern the risk framework, maintain the risk register, implement risk mitigation, and report to senior leadership while partnering with stakeholders to promote a risk-aware culture.

Qualifications

• Bachelor's degree in BA or BS required.
• 7+ years IT risk management, audit, or cybersecurity experience.
• Strong analytical and problem-solving abilities.
• Experience with managing risk for enterprise technology and data.
• Deep understanding of COBIT, NIST, and ISO 27001.
• Experience with GRC systems.
• Experience with SOX and FFIEC requirements.
• Familiarity with security best practices for enterprise systems.
• Knowledge of ITGCs, IT application controls, GLBA, Information Security, CI/CD, control design and testing.
• Experience in banking regulations and industry frameworks preferred.

Responsibilities

• Own and govern the domain risk management framework in line with enterprise risk appetite and business objectives.
• Maintain a comprehensive risk register, ensuring risks are documented, tracked, and actioned.
• Develop and implement risk mitigation strategies to reduce exposure.
• Ensure adherence to internal policies and regulatory requirements.
• Lead oversight of domain risk incidents, RCAs, corrective actions, and remediation.
• Evaluate control design and effectiveness and recommend enhancements.
• Lead annual technology risk assessments aligned to business expectations.
• Deliver concise risk reporting and executive communications to senior leadership.
• Serve as a trusted advisor to senior stakeholders to promote a risk-aware culture.

Skills

Analytical skills

Problem-solving

IT risk management

Auditing

GRC systems

COBIT

NIST

ISO 27001

SOX

FFIEC

Encryption

Access control

CI/CD

Control testing

Education

Bachelor's degree in BA or BS

Tools

Archer GRC

Job description

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.

Overview

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, 'job flexibility benefits' [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who We’re Looking For

Reporting to the National Manager, Domain Risk Leads, the Domain Risk Lead will play a critical role in advancing the IT Risk department’s mission by executing established risk assessment frameworks for IT and Data Risk. This includes ensuring alignment with COBIT and other recognized IT and Data Management standards, while integrating these practices into the broader Enterprise Risk Management (ERM) framework.

Through proactive risk oversight and governance, the Domain Risk Leader is accountable for ensuring that technology releases meet quality expectations and that any residual risks are clearly articulated, enabling informed decision-making across the business.

What You’ll Be Doing

• Own and govern the domain risk management framework in alignment with enterprise risk appetite, strategic priorities, and business objectives.
• Direct the maintenance of a comprehensive, continuously updated risk register, ensuring risks are accurately documented, tracked, and actioned.
• Develop and implement risk mitigation strategies that materially reduce exposure to the organization and embed risk management into core business operations.
• Ensure adherence to internal policies, organizational standards, and applicable regulatory and control requirements.
• Lead oversight of domain risk incidents, root cause analysis, corrective actions, and remediation tracking to closure.
• Evaluate the design and effectiveness of controls and recommend enhancements to strengthen the control environment.
• Lead annual technology risk assessments and ensure outcomes are actionable, risk-based, and aligned to business and enterprise expectations
• Deliver concise, high-impact risk reporting and executive communications to senior leadership on key risks, findings, trends, and remediation progress.
• Serve as a trusted advisor to senior stakeholders, influencing decisions and promoting a strong risk-aware culture across the domain.

What You Bring

• Bachelor's degree in BA or BS
• 7+ years of experience in IT risk management, audit, or cybersecurity experience
• Strong analytical and problem-solving abilities
• Experience with managing risk for enterprise technology and data
• Deep understanding of risk frameworks such as COBIT, NIST, and ISO 27001
• Implementation and/or use of GRC systems
• Experience with operational risk management and/or auditing, Sarbanes Oxley, (SOX), FFIEC requirements
• Familiarity with security best practices for enterprise systems, including encryption, access control, and monitoring
• Working knowledge or the principles of technology and data risk management including ITGCs, IT application controls, GLBA, Information Security, Release Management, CI/CD, control design, and testing within complex enterprise data environments
• Banking Regulations and Industry Frameworks preferably working in a banking institution

Added bonus if you have

• Masters or graduate degree
• 10+ years of experience in IT risk management, audit, or cybersecurity experience
• Certified Information Systems Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Risk in Risk and Information Systems Control (CRISC)
• Prior working experience using Archer GRC
• Experience implementing/designing controls related to AI or Cloud technology

What We’ll Bring

During your interview process, our team can fill you in on all the details of our industry-leading benefits and career

Development Opportunities. A Few Highlights Include

• A work environment built on teamwork, flexibility, and respect
• Professional growth and development programs to help advance your career, as well as tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota

regardless of whether you contribute (if applicable)

• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• Relocation assistance (if applicable)

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star.

Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.

Have a question, need assistance with your application or do you require any special accommodations? Please send an email to [e-mail].