Executive Assistant-Information Security & Risk Operations

Toyota Tsusho America, Inc.; Georgetown (KY); On-site; USD 75,000 - 105,000; Full time

Benefits offered by this job

Competitive Salary with Bonus

Paid Time Off

Medical, Dental and Vision Benefits

Flexible Spending and HSA

14 Paid Company Holidays

401(k) with Company Contribution

Tuition Reimbursement

Job summary

Toyota Tsusho America, Inc. is seeking an Executive Assistant, Information Security Operations to provide high-impact operational, financial, and administrative support to the Information Security and Enterprise Risk teams.

You will own budget compilation, deliver monthly analytics, and lead variance reviews, while coordinating MSAs, SOWs, and insurance workflows. The role also manages TCOR modeling, prepares executive materials, and supports governance activities, with a focus on data-informed

Qualifications

• 3–5+ years in executive assistant, business operations, finance/FP&A, vendor management, procurement, or PMO support.
• Experience within Information Security, IT, or Enterprise Risk preferred.
• Budget compilation, variance analysis, and executive reporting experience.

Responsibilities

• Lead the annual security budget compilation with structured interviews of security management and risk stakeholders.
• Deliver monthly budget-to-actual reporting and year-over-year trend analytics.
• Create dashboards and executive-ready summaries highlighting insights and actions.
• Facilitate monthly variance reviews and propose corrective actions with stakeholders.
• Manage renewals and onboarding for cybersecurity MSAs, SLAs, and SOWs.
• Coordinate insurance renewal data and Certificates of Insurance (COIs).
• Oversee the TCOR model and report quarterly trends to leadership.
• Provide high-level calendar management and executive support to security leadership.
• Translate technical risk concepts into clear business language for non-technical stakeholders.

Skills

Budgeting

Financial analysis

Executive communications

Vendor/contract administration

Project coordination

Tools

MSA management

SOW coordination

COI management

Job description

What's In It For You?

• Competitive Salary with Bonus Opportunities
• Paid Time Off
• Comprehensive Medical, Dental and Vision Benefits (Low Premiums!)
• Flexible Spending and Health Savings Accounts
• 14 Paid Company Holidays
• 401(k) with Company Contribution
• Educational Tuition Reimbursement

Summary

The Executive Assistant, Information Security Operations provides high-impact operational, financial, and administrative support to the Information Security and Enterprise Risk teams. This role owns the annual budget compilation process through structured interviews with security leadership, delivers monthly budget-to-actual analytics and year-over-year trending, leads variance review discussions with stakeholders, and proposes next steps grounded in data. The position also manages contract renewals and onboarding for cybersecurity MSAs, coordinates information for corporate insurance renewal programs, handles first-line insurance inquiries and COI distribution, and oversees Total Cost of Risk (TCOR) process management. The role has no independent decision-making authority but is accountable for research, analysis, and well-reasoned recommendations to drive informed decisions.

What You'll Do

Financial Planning, Budgeting, and Analytics: Lead the annual security budget compilation process by conducting structured interviews with security management and enterprise risk stakeholders to accurately capture initiatives, run-rate costs, headcount needs, and capital or operating splits. Validate assumptions, timelines, and dependencies; document rationale and risk ranges. Deliver monthly budget-to-actual reporting and analytics. Produce variance analyses (volume, rate, timing, and scope drivers) and year-over-year trending. Create dashboards and executive-ready summaries highlighting key insights, risks, and required actions.

Variance Reviews and Financial Tracking: Facilitate monthly variance reviews by coordinating agendas, consolidating cross-functional inputs, and leading discussions with management regarding budget variances. Propose corrective actions, re-forecasts, or reprioritization based on data and stakeholder input. Maintain financial calendars, close timelines, and deliverable trackers with Finance. Track savings initiatives (contract consolidations, license optimization, scope right-sizing) and realized benefits.

Contracts, Vendor Management, and Procurement Support: Fully manage renewals and onboarding workflows for cybersecurity Master Services Agreements (MSAs). Coordinate directly with Legal, Procurement, and Security Subject Matter Experts (SMEs) on contract terms, Statements of Work (SOWs), Service Level Agreements (SLAs), data protection addenda, and risk assessments. Maintain a centralized repository of contract artifacts, expiration dates, and required notice periods. Support the end-to-end vendor lifecycle by intaking requests, assembling due diligence materials, shepherding reviews through approval workflows, and monitoring performance metrics to flag issues. Prepare negotiation packets with spend history, utilization data, benchmarks, and risk considerations.

Risk, Compliance, Insurance, and TCOR Oversight: Support the corporate insurance renewal process by gathering critical security and risk data for underwriting, including controls, historical incidents, audit results, and overall compliance posture. Coordinate responses to first-line insurance inquiries and manage the distribution of Certificates of Insurance (COIs). Oversee Total Cost of Risk (TCOR) process management by defining core components such as premiums, retentions, claims, incident response, downtime, third-party costs, and mitigation investments. Build and maintain a dynamic TCOR model to report quarterly trends to leadership, partnering with Risk Management to align these insights with budget and vendor decisions. Enable compliance by assisting with evidence collection for audits and assessments—such as SOC 2, ISO 27001, and NIST CSF mapping—while maintaining a calendar for attestations and renewals.

Executive, Operational, and Program Support: Provide high-level calendar management, meeting coordination, and communications support to security leadership. Prepare executive-ready materials, briefings, Quarterly Business Reviews (QBRs), and board or C-suite packets using clear narratives and clean visuals. Coordinate cross-functional initiatives and track key deliverables using roadmaps, milestones, and risk logs. Standardize and continuously improve operations by creating and updating RACI matrices, Standard Operating Procedures (SOPs), templates, intake forms, and trackers. Safeguard the absolute confidentiality of sensitive security, legal, and financial information.

Stakeholder Engagement and Communication: Serve as the central point of coordination between Security, Enterprise Risk, and external vendors. Translate complex technical and security concepts into clear, action-oriented business language for non-technical stakeholders. Maintain active status updates, issue logs, and decision registers to ensure transparency and consistent follow-through across teams.

What You Need

Work Experience: 3–5+ years in executive assistant, business operations, finance/FP&A analyst, vendor management, procurement, or PMO support roles; experience within Information Security, IT, or Enterprise Risk strongly preferred. Demonstrated experience with budget compilation, variance analysis, and executive reporting. Hands‑on experience with contract administration (MSAs, SOWs) and vendor onboarding/renewal workflows. Exposure to corporate insurance processes and TCOR concepts is strongly preferred.

Licenses and Certifications

Progress toward Certified Associate in Project Management (CAPM), Certified in Risk and Information Systems Control (CRISC), or equivalent risk/project certifications preferred.

Knowledge, Skills & Abilities

Knowledge: Basic understanding of cybersecurity functions (e.g., vulnerability management, SOC, identity, GRC) and how they drive spend. Familiarity with security frameworks (NIST CSF, ISO 27001) and audit/attestation basics (SOC 2). Contract terminology (MSA, SOW, SLA, DPA, indemnification, termination, renewal/auto-renewal) and procurement workflows. Insurance and TCOR fundamentals (premiums, retentions, claims drivers, loss control). Skills: Financial analysis: budget-to-actuals, variance decomposition, trend analysis, and forecasting. Executive communications: concise memos, decision briefs, and visually clear dashboards. Project coordination: meeting facilitation, timeline management, dependency tracking. Vendor/contract administration: document control, renewal calendars, and approval routing. Research and synthesis: quickly gather facts, validate sources, and distill insights. Abilities: Operate with high discretion handling sensitive information. Influence without authority; lead structured discussions and drive closure on action items. Context switch across executive support, financials, and compliance tasks without loss of rigor. Anticipate needs, identify process gaps, and implement pragmatic improvements.

Shift Time Pay

Our company is proud to be an equal opportunity employer! It is the policy and commitment of the company to maintain a work environment that provides equal employment opportunity (EEO) for all its employees and applicants. We are committed to providing equal employment opportunities without regard to race, color, ethnicity, religion, sex, sexual orientation, gender identity, pregnancy, national origin, age, marital/domestic partner status, veteran status, disability, genetic information or any other applicable lawfully protected basis. This policy applies to all terms and conditions of employment. We seek to employ individuals qualified for a position by virtue of job-related educational standards, training, experience, and personal qualifications.

Toyota Tsusho America, Inc. (TAI) is a multi-market, multi-business enterprise which has been operating in North America for over 60 years. Based on both the heritage and the global vision of our parent company, Toyota Tsusho Corporation, we have greatly expanded upon our traditional trading business model by developing new manufacturing, intermediate goods processing, and logistics activities in United States, Canada, Mexico, and the Caribbean. TAI is a North American leader in procurement, processing, recycling, and supply chain management, with deep expertise in the automotive sector. With a team of over 8,000, TAI delivers value on every level, addressing business and social challenges and driving innovative, sustainable solutions for a better future. Join us and discover a work experience where diverse ideas are met with enthusiasm, and where you can learn and grow to your full potential! We're looking for individuals who enjoy the entrepreneurial thrill of innovation and who enjoy working as a team to create a satisfying outcome for our customers! Be The Right One The Right ONE for you: The best assurance of safety, quality, and reliability - based on your needs (Genba) The Right ONE for us: Maximization of individual capabilities, global networks and diversity to create synergistic strengths The Right ONE for future: Unique insights and capabilities to explore new possibilities for future and sustainable society Toyota Tsusho America’s business spans a wide range of fields. We have organized our business under seven operating divisions. Metal Plus Circular Economy Digital Solutions Supply Chain Mobility Green Infrastructure Lifestyle Though different in the products and services they provide, these divisions share the same goal of creating and delivering diverse value by developing unique functions from a dedicated customer-oriented approach. Each division maintains highly specialized expertise and leverages unique capabilities in its respective field. At the same time, the divisions combine their know-how and capabilities to generate synergy and create new value.