Senior Analyst, Cyber Risk Assurance

Toyota Motor North America; Plano (TX); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Team Member Vehicle Purchase Discount

Comprehensive health care and wellness

401(k) Savings Plan with company match

Job summary

Toyota Motor North America is seeking a Senior Cyber Risk Assurance Analyst to design, manage, and mature the Information Security Governance, Risk, and Compliance program. You will work with leaders across Information Security, Data & Technology, Legal, and Privacy to establish a mature GRC program and processes.

The role requires broad knowledge of information security frameworks and regulatory requirements, with a focus on governance, audits, and remediation across Toyota entities in North

Qualifications

• 4–6 years in IT audit or cybersecurity roles with strong background in frameworks, standards, and regulations.
• Solid knowledge of cybersecurity frameworks (NIST CSF, ISO 27001, PCI DSS).
• Ability to influence and build relationships with LOB stakeholders, technology leadership, and external partners.
• Experience conducting Information Security risk assessments.

Responsibilities

• Cybersecurity governance strategy development and implementation aligned with goals, risk, and regulatory needs.
• Policy development, updates, and enforcement to ensure compliance with regulations and industry standards.
• Liaise with stakeholders to support security-related regulatory and statutory audits and assessments.
• Lead remediation of audit findings with stakeholders to develop and implement corrective actions.
• Develop and manage risk and compliance dashboards for different audiences (management, executives).
• Oversee selection, implementation, and management of cybersecurity governance tools and technologies.

Skills

Cybersecurity governance

Stakeholder influence

Project management

Written communication

Organizational skills

IT audit experience

Risk assessments

Education

Bachelor's degree in CS/IT

Job description

Overview

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota’s vision to move people beyond what’s possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, ‘job flexibility benefits’ [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who we’re looking for

Toyota’s Cyber Risk Department is looking for a passionate and highly motivated Senior Cyber Risk Assurance Analyst.

The primary responsibility of this role is to design, manage, and maturing the Information Security Governance, Risk, and Compliance program. In this role, you will engage with leaders across the organization (e.g., Information Security, Data and Technology, Legal, Privacy, etc.) to establish and mature the GRC program and supporting processes. This leader must demonstrate broad knowledge of Information Security processes, as well as a strong understanding of industry frameworks (e.g. NIST CSF, ISO 27001, PCI DSS, etc.), and regulatory requirements (e.g. Sarbanes-Oxley, FFIEC, etc.).

What you’ll be doing

• Cybersecurity Governance Strategy: Develop and implement a comprehensive cybersecurity governance strategy aligned with organizational goals, risk management, regulatory needs, and industry best practices.
• Policy Development: Create, update, and enforce cybersecurity policies, standards, and processes to ensure compliance with regulations and industry standards. Stay current with changes to existing regulations and newly emerging regulations or industry guidance applicable to Toyota companies and provide timely guidance regarding potentially impacting changes.
• Security Audits: Liaise with stakeholders to support security-related regulatory and statutory audit and assessment activities.
• Compliance: Manage the remediation of audit and assessment findings by partnering closely with Information Security leaders and other stakeholders to develop remediation plans and ensure the countermeasures are in place on a timely basis.
• Dashboards and reporting: Develop and manage clear risk and compliance dashboards that can be tailored to differing audiences (i.e. management, executives, etc.) to communicate risks and mitigation strategies.
• Security Tools and Technologies: Oversee the selection, implementation, and management of cybersecurity governance tools and technologies.

What you bring

• Bachelor’s degree in computer science, information technology, or a related field.
• Proven experience (4-6 years) in IT audit and / or cybersecurity roles, with a strong background in cybersecurity frameworks, strategy, standards, and regulations.
• Strong ability to influence and build relationships with LOB stakeholders, technology leadership, internal, and external partners.
• Strong project management, strong writing proficiency, and organizational abilities.
• Experience conducting Information Security risk assessments.

Added bonus if you have

• Certified Information Systems & Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Security Auditor (CISA) certifications.
• Progressive work experience in a similar field and / or industry.

What we’ll bring

During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:

• A work environment built on teamwork, flexibility, and respect
• Professional growth and development programs to help advance your career, as well as tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• Relocation assistance (if applicable)

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star.

Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.