Senior InfoSec & Infrastructure Lead

Toyota Deutschland GmbH; San Juan (PR); On-site; USD 90,000 - 130,000; Full time

Job summary

Toyota Deutschland GmbH seeks an Information Security professional to govern security policies, manage access to assets, and drive security awareness across the organization. The role collaborates with IT to ensure regulatory compliance and corrects vulnerabilities in a structured, risk-based approach.

The position covers governance, vulnerability management, incident response, and security operations, reporting to the Information Security Officer and regional GISG teams to align with corporate

Qualifications

• Experience in information security governance and regulatory requirements.
• Ability to produce monthly risk indicators and reports for IT security.
• Experience with access control, attestation, and onboarding/offboarding processes.

Responsibilities

• Understand business processes, policies, and governance practices.
• Ensure compliance with GISG/TMCC security standards.
• Produce monthly Key Risk Indicators and security metrics.
• Provide security status to ISO and GISG regional representative.
• Identify non-compliance and submit exceptions for approval.
• Monitor vulnerability and endpoint management activities and remediation progress.
• Oversee security operations and infrastructure upgrades.
• Assist ISO with incident response, testing, and postmortem reviews.

Skills

InfoSec

Security Governance

Access Administration

Security Awareness

Vulnerability Management

Endpoint Management

Security Operations

Incident Response

Infrastructure Support

Job description

Toyota Deutschland GmbH seeks an Information Security professional to govern security policies, manage access to assets, and drive security awareness across the organization. The role collaborates with IT to ensure regulatory compliance and corrects vulnerabilities in a structured, risk-based approach.

The position covers governance, vulnerability management, incident response, and security operations, reporting to the Information Security Officer and regional GISG teams to align with corporate