Domain Risk Lead — IT & Data Risk Strategy

TCC Toyota Motor Credit Corporation Company; Plano (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Toyota Financial Services is seeking a Domain Risk Lead to drive IT risk management and governance within the enterprise. You will align COBIT, NIST, and ISO 27001 with ERM, oversee risk incidents, and ensure proper controls across technology and data. This role partners with senior leadership to embed a risk-aware culture.

The ideal candidate brings 7+ years in IT risk management or cybersecurity, along with strong analytical skills and experience with GRC systems such as Archer GRC.

Qualifications

• Bachelor's degree in BA or BS required.
• 7+ years of IT risk management, audit or cybersecurity experience.
• Strong analytical and problem-solving abilities.
• Experience with managing risk for enterprise technology and data.
• Deep understanding of COBIT, NIST, ISO 27001.
• Experience with GRC systems; SOX/FFIEC familiarity.

Responsibilities

• Own and govern the domain risk management framework.
• Maintain a comprehensive risk register and ensure actioned risks.
• Develop and implement risk mitigation strategies to reduce exposure.
• Ensure adherence to policies, standards and regulatory requirements.
• Lead domain risk incidents, root-cause analysis and remediation tracking.
• Evaluate controls and recommend improvements to strengthen the environment.
• Lead annual technology risk assessments and align with enterprise expectations.
• Deliver concise risk reporting and executive communications to senior leadership.
• Serve as trusted advisor to senior stakeholders to promote risk-aware culture.

Skills

IT risk management

Audit

Cybersecurity

COBIT

NIST

ISO 27001

GRC systems

SOX

Education

Bachelor's degree in BA or BS

Tools

Archer GRC

Job description

Toyota Financial Services is seeking a Domain Risk Lead to drive IT risk management and governance within the enterprise. You will align COBIT, NIST, and ISO 27001 with ERM, oversee risk incidents, and ensure proper controls across technology and data. This role partners with senior leadership to embed a risk-aware culture.

The ideal candidate brings 7+ years in IT risk management or cybersecurity, along with strong analytical skills and experience with GRC systems such as Archer GRC.