Principal AI Governance & Security Engineer

TCC Toyota Motor Credit Corporation Company; Plano (TX); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health care

Tuition reimbursement

Relocation assistance

Job summary

Toyota Financial Services in Plano, TX, seeks a Principal AI Governance & Security Engineer to lead governance and security for AI/agentic systems. This role spans policy, threat modeling, and production-grade controls across the AI lifecycle.

The ideal candidate combines deep governance acumen with software engineering strength, and will collaborate with Legal, Privacy, Cybersecurity, and Model Risk teams to scale safe AI use cases.

Qualifications

• 12+ years of software engineering with AI governance and information security experience.
• Experience turning security and compliance requirements into executable controls.
• Knowledge of SR 11-7, NIST AI RMF, EU AI Act, ISO/IEC 42001 is preferred.

Responsibilities

• Shape enterprise AI governance framework and lifecycle controls.
• Conduct AI security threat modeling and risk assessments.
• Embed with product teams to design and ship governed AI controls.

Skills

AI governance

Security engineering

Threat modeling

Software engineering

Cloud (AWS)

Policy as code

Communications

Regulatory compliance

Tools

AWS

Bedrock/AgentCore

Cedar policies

SIEM

Job description

Overview Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us. An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment. Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, ‘job flexibility benefits’ [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who we’re looking for

Toyota Financial Services' AI & ML Platforms team is looking for a passionate and highly motivated Principal AI Governance & Security Engineer. This is a hands-on, principal-level role that sits at the intersection of AI governance, AI security, and forward deployed engineering. You will help build the enterprise control plane that lets Toyota deploy AI and agentic systems safely, compliantly, and at scale - turning governance and security requirements into working, production-grade controls rather than documents. Reporting to the Director of AI & ML Platforms and partnering closely with the AI Governance team, Cybersecurity, Model Risk, Legal, Privacy, and the business, you will own the technical foundation for how AI use cases and agents move from idea to production. A typical week spans three kinds of work: shaping the governance framework and lifecycle controls (roughly half your time), hardening the security posture of our AI and agentic platforms (about a quarter), and embedding directly with use-case teams to design, build, and ship the controls they need to launch (about a quarter). The ideal candidate combines deep governance and information-security judgment with a strong software engineering background, and is equally comfortable authoring a control standard, threat-modeling an agent, and writing the code that enforces both.

What you’ll be doing

In this role you'll help shape the foundation for Toyota Financial Services' next generation of governed AI and agentic capabilities, where success means AI systems that are demonstrably safe, auditable, compliant, and useful in production. You'll balance governance rigor against engineering velocity so teams can innovate within guardrails instead of around them.

AI Governance (≈50%)

• Design, author, and maintain the enterprise AI governance framework - standards, policies, and procedures across the full lifecycle of AI use cases and models, from intake through production monitoring and retirement
• Operationalize lifecycle gates: intake, risk classification, control design, approval workflows, monitoring, and remediation
• Define risk tiers and controls proportional to use-case risk, extending model risk management to AI/ML and GenAI in line with SR 11-7, NIST AI RMF, the EU AI Act, and ISO/IEC 42001
• Own the Agent Registry and AI inventory as the authoritative source of truth - registration, versioning, and prevention of shadow-AI deployments
• Translate governance policy into repeatable, testable engineering controls, partnering with the AI Governance team to move controls from observation to staged enforcement

AI Security (≈25%)

• Perform AI-specific threat modeling and risk assessments - prompt injection, data poisoning, adversarial attacks, model theft, and data exfiltration - and design mitigations across the data, model, application, and infrastructure layers
• Design guardrail, isolation, and least-privilege controls for agents - sandboxed execution, non-human identity, secrets management, and mediated tool access through the MCP registry
• Build AI-specific incident response playbooks, drive red-team exercises, and embed security into the AI/ML lifecycle (DevSecOps for AI) with audit logging into enterprise SIEM

Forward Deployed Engineering (≈25%)

• Embed with use-case, product, and platform teams to design and ship the executable controls they need to launch AI and agentic solutions within governed boundaries
• Build reusable, production-grade capabilities hands-on: guardrail services, evaluation pipelines, agent/MCP registrations, and human-in-the-loop approval flows - using AWS, Bedrock/AgentCore, Cedar policies, and Lambda/Step Functions
• Lead design reviews, set engineering standards, and mentor engineers across the governance and security control stack

What you bring

• 12+ years of software engineering experience and demonstrated experience with AI/ML/Data Governance and associated information-security of AI/ML
• Designing and implementing enterprise AI or data governance frameworks and operational governance processes in production
• Translating security, risk, privacy, and compliance requirements into executable controls, measurable tests, and working software
• Deep understanding of AI/model risk and responsible-AI principles, with working knowledge of SR 11-7, NIST AI RMF, the EU AI Act, and ISO/IEC 42001
• Practical AI security depth - threat modeling, guardrails, identity and access management, secrets, and least-privilege design
• Governing and securing GenAI, RAG, and agentic systems - model/agent registries, MCP or comparable tool-mediation patterns, and evaluation frameworks
• Strong software, data-engineering, or automation skills, with production experience on a major cloud (AWS preferred) and modern CI/CD
• Strong communication - able to explain technical AI risk and control gaps to both engineers and senior executives

Added bonus if you have Direct experience governing or securing enterprise AI/GenAI programs in financial services or another regulated industry

Hands-on experience with AWS AI services (Bedrock, AgentCore, Bedrock Guardrails), policy-as-code (e.g., Cedar), and LLM/agent evaluation and guardrail frameworks (LLM-as-judge, trajectory evaluation, NeMo Guardrails, Llama Guard)

Relevant certifications - CISSP, CCSP, CRISC, CISA, a Certified AI Security/Governance credential, or a model-risk certification

What we’ll bring

• A work environment built on teamwork, flexibility, and respect
• Professional growth and development programs to help advance your career, as well as tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• Relocation assistance (if applicable)

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star. Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law. Have a question, need assistance with your application or do you require any special accommodations? Please send an email to [e-mail]. At Toyota, we don’t just have a vision, but a group of talented, dedicated people who work hard every day to turn that vision into reality. Our mission is to build a future where everyone has the freedom to move. We believe that nothing is impossible. We have big dreams and persevere through any obstacles. We work together to create the future of mobility and make the world a better place.

Career Possibilities

Toyota is a place for people who dream big and are determined to make those dreams a reality. We encourage innovation and look for people who will challenge the status quo in order to make the world a better place. We thrive on teamwork and collaboration and know diverse backgrounds, experiences and perspectives are not only the right thing for our people, they are a business imperative. Together, we’re empowered to forge our own paths - to be agile, curious and embrace a growth mindset and immerse ourselves in situations to gain new perspectives and to inspire bold, innovative ways of thinking and working. Our success as a company is directly tied to our team members’ success, and our collective ability to give back to society through an unwavering commitment to delight our customers and make people’s lives better. If you want to be part of the next-generation of innovations that help keep the world moving, then join us. And let’s start our impossible, together.