Manager, IT Risk Governance & Assessment

Toyota North America; Plano (TX); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Health care benefits

401(k) plan with company match

Paid holidays and time off

Relocation assistance

Job summary

Toyota North America is seeking a Manager, IT Risk Governance & Assessment within the Toyota Financial Services Data Governance Office. The role leads IT risk management framework development, policy creation, and control documentation.

You will drive enterprise risk identification and collaborate with senior executives to strengthen governance and regulatory alignment. You will guide teams through complex assessments, translate regulatory requirements into actionable standards, and foster a

Qualifications

• Bachelor's degree in information technology, cybersecurity, risk management, or a related field.
• 7+ years in IT risk management, cybersecurity, or compliance in a regulated financial services environment.
• Proven experience building IT risk governance frameworks, policies, standards, and controls (NIST/ISO 27001/COBIT).
• Strong analysis skills with risk identification, assessment methods, and root-cause analysis.
• Ability to translate regulatory requirements into clear policies and controls for teams to execute.
• Excellent communication skills with executives and diverse stakeholders.
• Experience managing direct reports and matrixed teams in a high-pressure environment.
• Track record of mentoring and developing talent for strategic focus.

Responsibilities

• Develop, maintain, and enhance IT risk policies, standards, and control frameworks to manage technology risk.
• Own and maintain the enterprise IT Control Library and ensure regulatory alignment.
• Lead enterprise IT risk identification and assessment to uncover emerging risks and control gaps.
• Use incident insights to strengthen controls and improve risk posture.
• Manage and develop direct reports and matrix resources; remove barriers to success.
• Build partnerships with senior executives (CRO, CIO, CISO, CPO, CTO) with clear, business-focused recommendations.
• Collaborate with control execution teams to ensure consistent policy implementation.
• Partner with governance, audit, and compliance teams to align risk frameworks with regulations.
• Promote a risk-aware culture through guidance, training, and communication.
• Monitor regulatory changes and emerging threats to keep the framework current.
• Lead with a strategic mindset while supporting operational excellence in a regulated environment.
• Foster teamwork and professional development across the organization.

Skills

IT risk governance

risk assessment

cybersecurity

compliance

regulatory requirements

communication to executives

leadership and mentoring

Education

Bachelor's degree in IT/Cybersecurity/Risk Management

Tools

NIST

ISO 27001

COBIT

Job description

Overview

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota’s vision to move people beyond what’s possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, ‘job flexibility benefits’ [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who we’re looking for

Toyota Financial Services Data Governance Office is looking for a passionate and highly motivated Manager, IT Risk Governance & Assessment. The primary responsibility of this role is to lead the foundational activities that establish and strengthen Toyota Financial Services’ IT risk management framework, ensuring the organization can proactively identify, assess, and mitigate risk across the enterprise. In this role, you will shape the policies, standards, and control documentation that define how IT risk is managed, while continuously improving the framework through incident learnings and emerging threat insights. Reporting to the Data Governance Office leadership, the person in this role will support the Data Governance Office’s objective to build a resilient, risk-aware IT environment that enables strong governance, regulatory alignment, and sound executive decision-making.

What you’ll be doing

A typical day in this role may include partnering with business and technology leaders to strengthen IT risk controls, guiding your team through complex assessments, and translating regulatory requirements into practical governance actions. Success means helping the organization stay ahead of risks, building trust with senior executives, and creating frameworks that are both effective and sustainable.

• Develop, maintain, and enhance IT risk management policies, standards, and control frameworks that guide Toyota Financial Services’ approach to managing technology risk

• Own and maintain the enterprise IT Control Library, ensuring controls are aligned to regulatory expectations and industry frameworks

• Lead enterprise-wide IT risk identification and assessment efforts to uncover emerging risks, vulnerabilities, and control gaps before they become issues

• Use incident investigation insights to strengthen controls and continuously improve the organization’s risk posture

• Manage and develop direct reports and matrix resources by delegating effectively, coaching for growth, and removing barriers to success

• Build trusted partnerships with senior executives, including the CRO, CIO, CISO, CPO, and CTO, by communicating clearly and delivering credible, business-focused recommendations

• Collaborate closely with control execution teams to ensure policies and standards are implemented consistently and effectively

• Partner with governance, audit, and compliance teams to keep risk frameworks aligned with regulatory requirements and industry best practices

• Promote a strong risk-aware culture through guidance, training, and communication on core IT risk principles

• Monitor regulatory changes and emerging threats to keep the risk framework current, relevant, and effective

• Lead with a strategic mindset while supporting operational excellence in a highly regulated environment

• Foster teamwork, resilience, and professional development across your organization

What you bring

• Bachelor’s Degree in Information Technology, Cybersecurity, Risk Management, or a related field that provides a strong foundation for this work

• 7 or more years of experience in IT risk management, cybersecurity, compliance, or a related discipline within a large, regulated financial services environment

• Proven experience developing and managing IT risk governance frameworks, policies, standards, and controls such as NIST, ISO 27001, or COBIT

• Strong analytical skills with hands‑on experience in risk identification, assessment methodologies, and root cause analysis

• Ability to translate complex regulatory requirements into clear, practical policies and controls that teams can execute

• Excellent communication skills with the ability to explain complex concepts clearly to senior executives and diverse stakeholders

• Experience managing both direct reports and matrixed teams in a dynamic, high‑pressure environment

• A track record of mentoring and developing talent, including helping junior team members grow into more strategic roles

Added bonus if you have

• An advanced degree that deepens your expertise in IT risk, cybersecurity, or governance

• Additional experience in enterprise risk management within a large financial services organization

• Familiarity with Agile execution environments and Scrum leadership

• Experience working within or alongside first line of defense risk functions

• Certifications or specialized knowledge that strengthen your ability to lead governance and control design

What we’ll bring

What we’ll bring During your interview process, our team can fill you in on all the details of our industry‑leading benefits and career development opportunities. A few highlights include:

• A work environment built on teamwork, flexibility, and respect

• Professional growth and development programs to help advance your career, as well as tuition reimbursement Team Member Vehicle Purchase Discount Toyota Team Member Lease Vehicle Program (if applicable)

• Comprehensive health care and wellness plans for your entire family

• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)

• Paid holidays and paid time off

• Referral services related to prenatal services, adoption, childcare, schools and more

• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)

• Relocation assistance (if applicable)

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star.

Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.

Have a question, need assistance with your application or do you require any special accommodations? Please send an email to [e-mail].