InfoSec Risk Manager – Banking RMF & Compliance Lead

TFB Toyota Financial Savings Bank Company; Plano (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Vehicle Purchase Discount

Lease Vehicle Program

Health care & wellness plans

401(k) with company match

Paid holidays & PTO

Relocation assistance

Tuition reimbursement

Job summary

The Toyota Financial Savings Bank is seeking a passionate Information Security Risk Manager to lead the enterprise-wide Cyber Risk Management Framework. Reporting to the CISO, you will establish a structured RMF process, interfacing with executives, internal audit and regulators to foster a mature risk-aware culture across the bank.

You will develop and implement risk management policies, oversee the risk lifecycle for information systems, and manage authorization packages.

Qualifications

• 7+ years in Information Security/Technology Risk management.
• Experience with NIST RMF (800-37) and 800-53 controls.
• Familiarity with FFIEC, GLBA, SOX regulations.
• Ability to communicate risk to executives and drive decisions.
• Bachelor’s degree or equivalent experience; security certifications valued.

Responsibilities

• Develop and maintain cyber risk policies using NIST RMF.
• Lead lifecycle of cyber risk for in-scope information systems.
• Manage risk-based authorization packages for leadership review.
• Oversee master security control catalog and regulatory alignment.
• Establish continuous monitoring to maintain acceptable security posture.
• Administer GRC platform (ServiceNow GRC, Archer).
• Produce KPIs/KRIs and report enterprise risk panorama to leadership.
• Coordinate with system owners, IT teams and security functions.

Skills

NIST RMF

Cyber risk management

GRC platform

Executive communication

Security controls

Education

Bachelor's Degree

Advanced IT/Cybersecurity degree

Tools

ServiceNow GRC

Archer

Job description

The Toyota Financial Savings Bank is seeking a passionate Information Security Risk Manager to lead the enterprise-wide Cyber Risk Management Framework. Reporting to the CISO, you will establish a structured RMF process, interfacing with executives, internal audit and regulators to foster a mature risk-aware culture across the bank.

You will develop and implement risk management policies, oversee the risk lifecycle for information systems, and manage authorization packages.