Senior Threat & Exposure Management Strategist

Toyota North America; Plano (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Team Member Vehicle Purchase Discount

Comprehensive health care and wellness

Toyota 401(k) with company match

Job summary

Toyota North America is seeking a Senior Threat and Exposure Management Analyst to lead the integration, automation and continuous improvement of threat exposure management across our environments. You will drive vulnerability management, secure configuration, risk prioritization and security governance while partnering with cross-functional teams to deliver measurable risk reduction.

You will optimize reporting, stay ahead of emerging threats, and help translate complex security concepts for

Qualifications

• 7+ years of Information Security experience in relevant roles.
• Experience leading security operations and programs.
• Knowledge of NIST, ISO 27001, CIS Controls.

Responsibilities

• Oversee vulnerability management processes including scanning, assessment and remediation tracking.
• Prioritize risks based on business impact and threat intelligence.
• Collaborate with IT and business units to resolve vulnerabilities promptly.
• Establish and maintain security governance and reporting frameworks.
• Develop metrics and dashboards to communicate risk posture.

Skills

Threat management

Vulnerability mgmt

Risk assessment

Secure configuration

Security frameworks

Cloud security

Leadership

Communication

Automation scripting

Education

Bachelor's in CS/InfoSec

Cert CISSP/CISM/CRISC

Tools

Qualys

Tenable

Rapid7

Job description

Toyota North America is seeking a Senior Threat and Exposure Management Analyst to lead the integration, automation and continuous improvement of threat exposure management across our environments. You will drive vulnerability management, secure configuration, risk prioritization and security governance while partnering with cross-functional teams to deliver measurable risk reduction.

You will optimize reporting, stay ahead of emerging threats, and help translate complex security concepts for