Senior Cyber Risk & GRC Analyst

TCC Toyota Motor Credit Corporation Company; Plano (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health care and wellness plans

401(k) match

Paid holidays and time off

Relocation assistance

Job summary

Toyota Financial Services in Plano, TX, seeks a Senior Cyber Risk Assurance Analyst to design, manage, and mature the information security governance, risk, and compliance program. You will collaborate with Information Security, Data & Technology, Legal, and Privacy teams to strengthen controls aligned with NIST CSF, ISO 27001, and PCI DSS.

The role emphasizes policy development, risk assessments, audits, remediation, and executive dashboards.

Qualifications

• Bachelor's degree in computer science, information technology, or a related field.
• 4–6 years of IT audit or cybersecurity experience with a strong background in frameworks, standards, and regulations.
• Proven ability to influence stakeholders and manage cross-functional workstreams.
• CISSP, CISM, or CISA certifications are a plus.

Responsibilities

• Cybersecurity governance strategy development aligned with goals, risk, and regulatory needs.
• Policy development and enforcement of security standards and processes.
• Monitor regulatory changes and provide guidance on impact to Toyota companies.
• Lead or support security audits and regulatory assessments with stakeholders.
• Oversee remediation planning and tracking of controls and mitigations.

Skills

NIST CSF

ISO 27001

PCI DSS

Regulatory compliance

Stakeholder management

Project management

Education

Bachelor's degree in computer science, information technology, or related field

Tools

GRC tools

Job description

Toyota Financial Services in Plano, TX, seeks a Senior Cyber Risk Assurance Analyst to design, manage, and mature the information security governance, risk, and compliance program. You will collaborate with Information Security, Data & Technology, Legal, and Privacy teams to strengthen controls aligned with NIST CSF, ISO 27001, and PCI DSS.

The role emphasizes policy development, risk assessments, audits, remediation, and executive dashboards.