InfoSec Risk Manager - RMF & GRC Leader

Toyota North America; Plano (TX); On-site; USD 120,000 - 165,000; Full time

Benefits offered by this job

Vehicle purchase discount

Team member lease vehicle program

Health care and wellness plans

401(k) with company match

Paid holidays and PTO

Job summary

Toyota Financial Savings Bank is seeking a seasoned Information Security Risk Manager to design, implement, and govern the cyber risk program. This role reports to the CISO and partners with senior leadership to ensure a mature risk-aware culture across the organization.

You will manage policies, controls, monitoring, and KPIs, coordinating with IT, security, and auditors to maintain regulatory alignment and risk visibility across platforms.

Qualifications

• 7 years in Information Security, IT Audit, or Technology Risk Management.
• 3+ years in program management or leadership.
• Experience developing and implementing risk management frameworks (NIST RMF).
• Knowledge of NIST 800-53 and related security controls.

Responsibilities

• Develop, document, and maintain cyber risk policies based on NIST RMF.
• Lead the cyber risk management lifecycle for all in-scope information systems.

Skills

Information security

NIST RMF

NIST 800-53

Regulatory communications

FFIEC/GLBA knowledge

Education

Bachelor's degree

Tools

ServiceNow GRC

Archer

Job description

Toyota Financial Savings Bank is seeking a seasoned Information Security Risk Manager to design, implement, and govern the cyber risk program. This role reports to the CISO and partners with senior leadership to ensure a mature risk-aware culture across the organization.

You will manage policies, controls, monitoring, and KPIs, coordinating with IT, security, and auditors to maintain regulatory alignment and risk visibility across platforms.