TFSB Information Security Risk Manager

TFB Toyota Financial Savings Bank Company; Plano (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Vehicle Purchase Discount

Lease Vehicle Program

Health care & wellness plans

401(k) with company match

Paid holidays & PTO

Relocation assistance

Tuition reimbursement

Job summary

The Toyota Financial Savings Bank is seeking a passionate Information Security Risk Manager to lead the enterprise-wide Cyber Risk Management Framework. Reporting to the CISO, you will establish a structured RMF process, interfacing with executives, internal audit and regulators to foster a mature risk-aware culture across the bank.

You will develop and implement risk management policies, oversee the risk lifecycle for information systems, and manage authorization packages.

Qualifications

• 7+ years in Information Security/Technology Risk management.
• Experience with NIST RMF (800-37) and 800-53 controls.
• Familiarity with FFIEC, GLBA, SOX regulations.
• Ability to communicate risk to executives and drive decisions.
• Bachelor’s degree or equivalent experience; security certifications valued.

Responsibilities

• Develop and maintain cyber risk policies using NIST RMF.
• Lead lifecycle of cyber risk for in-scope information systems.
• Manage risk-based authorization packages for leadership review.
• Oversee master security control catalog and regulatory alignment.
• Establish continuous monitoring to maintain acceptable security posture.
• Administer GRC platform (ServiceNow GRC, Archer).
• Produce KPIs/KRIs and report enterprise risk panorama to leadership.
• Coordinate with system owners, IT teams and security functions.

Skills

NIST RMF

Cyber risk management

GRC platform

Executive communication

Security controls

Education

Bachelor's Degree

Advanced IT/Cybersecurity degree

Tools

ServiceNow GRC

Archer

Job description

Overview

Who we are Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us. An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment. Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, ‘job flexibility benefits’ [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who we’re looking for

The Toyota Financial Savings Bank is looking for a passionate and highly motivated TFSB Information Security Risk Manager. Reporting to the TFSB Chief Information Security Officer (CISO), this person will be the primary owner responsible for building, implementing, and managing the bank's enterprise-wide Cyber Risk Management Framework (RMF). The ideal candidate will be a strategic leader who can establish a structured, repeatable, and transparent process for managing cyber risk across the organization. You will serve as the central point of authority for Cyber Risk Management, interfacing with senior leadership, internal audit, and regulators to ensure the program's effectiveness and drive a mature, risk‑aware culture throughout the bank.

What you’ll be doing

Develop, document, and maintain all cyber risk management policies, standards, procedures, and methodologies based on the NIST Risk Management framework. Lead the execution of the cyber risk management lifecycle for all in‑scope information systems, including system categorization, security control selection, implementation guidance, and effectiveness assessments. Manage the formal system authorization process, preparing risk‑based recommendations and authorization packages for senior leadership to review and approve. Oversee the bank's master security control catalog and ensure it is kept current with emerging threats and regulatory requirements. Establish and mature a continuous monitoring strategy to ensure systems maintain an acceptable security posture. Administer and configure the Governance, Risk, and Compliance (GRC) platform that underpins the RMF program. Develop and report on Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) to provide leadership with a clear view of the enterprise risk landscape. Serve as the primary liaison between system owners, IT teams, and security functions to facilitate risk assessments and track remediation activities.

What you bring

A core understanding of banking‑specific Information Technology & Security regulations, including deep familiarity with FDIC and FFIEC Examination Handbooks. Minimum 7 years of previous experience in Information Security, IT Audit, or Technology Risk Management, with at least 3 years in a program management or leadership capacity. Demonstrable expertise in developing and implementing risk management frameworks, specifically the NIST Risk Management Framework (NIST 800‑37). In‑depth knowledge of security control frameworks, particularly NIST 800‑53. Strong understanding of FFIEC, GLBA, and SOX and their applicability to technologies and applications. Proven ability to engage with and present complex security risk concepts to executive leadership to encourage prioritization and drive decision‑making. Bachelor’s Degree from an accredited institution, or equivalent professional experience. Added bonus if you have Relevant security certification (CGRC, CRISC, CISSP, or CISM). Hands‑on experience building a risk management program from the ground up. Experience implementing or serving as the primary administrator for a GRC platform (e.g., ServiceNow GRC, Archer). Advanced degree with a concentration in an IT or Cybersecurity‑related area.

What we’ll bring

During your interview process, our team can fill you in on all the details of our industry‑leading benefits and career development opportunities. A few highlights include:

• A work environment built on teamwork, flexibility, and respect


• Professional growth and development programs to help advance your career, as well as tuition reimbursement


• Team Member Vehicle Purchase Discount


• Toyota Team Member Lease Vehicle Program (if applicable)


• Comprehensive health care and wellness plans for your entire family


• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)


• Paid holidays and paid time off


• Referral services related to prenatal services, adoption, childcare, schools and more


• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)


• Relocation assistance (if applicable)

We have big dreams and persevere through any obstacles. We work together to create the future of mobility and make the world a better place.

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star. Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.

Career Possibilities

Career Possibilities: Toyota is a place for people who dream big and are determined to make those dreams a reality. We encourage innovation and look for people who will challenge the status quo in order to make the world a better place. We thrive on teamwork and collaboration and know diverse backgrounds, experiences and perspectives are not only the right thing for our people, they are a business imperative. Together, we’re empowered to forge our own paths — to be agile, curious and embrace a growth mindset and immerse ourselves in situations to gain new perspectives and to inspire bold, innovative ways of thinking and working. Our success as a company is directly tied to our team members’ success, and our collective ability to give back to society through an unwavering commitment to delight our customers and make people’s lives better. If you want to be part of the next‑generation of innovations that help keep the world moving, then join us. And let’s start our impossible, together.