Domain Risk Lead – IT & Data Risk Strategist

Toyota North America; Plano (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Relocation assistance

Health care plans

Tuition reimbursement

Vehicle purchase/lease discounts

Job summary

Toyota North America is seeking a Domain Risk Lead to advance IT and data risk management. You will execute established risk assessment frameworks, ensure alignment with COBIT, NIST, and ISO 27001, and integrate practices into the Enterprise Risk Management framework.

You will oversee risk incidents, develop mitigation strategies, and report findings to senior leadership, influencing risk-aware decisions across the domain. Strong analytical skills and SOX/FFIEC familiarity are valued.

Qualifications

• Bachelor’s degree in BA or BS.
• 5+ years in IT risk management, audit, or cybersecurity.
• Strong analytical and problem-solving abilities.
• Experience managing risk for enterprise technology and data.
• Deep understanding of COBIT, NIST, and ISO 27001.
• Familiarity with SOX and FFIEC requirements.
• Experience with encryption, access control, and monitoring.

Responsibilities

• Own and govern the domain risk management framework in alignment with enterprise risk appetite and priorities.
• Maintain a comprehensive risk register that is updated, documented, and actioned.
• Develop and implement risk mitigation strategies to reduce exposure.
• Ensure adherence to internal policies, standards, and regulatory requirements.
• Lead domain risk incident oversight, root-cause analyses, and remediation tracking.
• Evaluate control design and strengthen the control environment.
• Lead annual technology risk assessments with actionable outcomes.
• Deliver risk reporting to senior leadership.

Education

Bachelor’s degree in BA or BS

Tools

Archer GRC

GRC systems

Job description

Toyota North America is seeking a Domain Risk Lead to advance IT and data risk management. You will execute established risk assessment frameworks, ensure alignment with COBIT, NIST, and ISO 27001, and integrate practices into the Enterprise Risk Management framework.

You will oversee risk incidents, develop mitigation strategies, and report findings to senior leadership, influencing risk-aware decisions across the domain. Strong analytical skills and SOX/FFIEC familiarity are valued.