Information Security Risk Manager — Banking RMF Lead

Toyota North America; Henderson (NV); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Vehicle Purchase Discount

Lease Vehicle Program

Health care and wellness plans

Tuition reimbursement

Job summary

Toyota North America is seeking a TFSB Information Security Risk Manager to own the enterprise RMF program and drive risk management across information systems. You will partner with senior leaders, auditors, and regulators to ensure a mature, risk-aware culture and transparent risk reporting.

The role requires strategic leadership, strong knowledge of NIST RMF, NIST 800-53, FFIEC/GLBA/SOX, and hands-on experience building risk programs from the ground up.

Qualifications

• 7+ years in Information Security, IT Audit, or Technology Risk Management with leadership experience
• Deep familiarity with FDIC FFIEC Handbooks and regulatory expectations
• Proven ability to develop and implement NIST RMF-based programs

Responsibilities

• Develop, document, and maintain cyber risk management policies, standards, and procedures per NIST RMF
• Lead the risk management lifecycle for all in-scope information systems
• Manage system authorization processes and present risk-based recommendations to leadership
• Oversee and update the master security control catalog to reflect threats/regulatory changes
• Establish and mature continuous monitoring to maintain secure posture
• Administer and configure the GRC platform underpinning the RMF program
• Develop KPIs/KRIs and report risk posture to executives
• Serve as liaison between system owners, IT, and security teams for risk assessments

Skills

NIST RMF

Cyber risk management

Executive communication

Security regulations

Project leadership

Education

Bachelor’s Degree

Tools

ServiceNow GRC

Archer

Job description

Toyota North America is seeking a TFSB Information Security Risk Manager to own the enterprise RMF program and drive risk management across information systems. You will partner with senior leaders, auditors, and regulators to ensure a mature, risk-aware culture and transparent risk reporting.

The role requires strategic leadership, strong knowledge of NIST RMF, NIST 800-53, FFIEC/GLBA/SOX, and hands-on experience building risk programs from the ground up.