Security Architect, Lead

Overview

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

To save time applying, Toyota does not offer sponsorship of job applicants for employment-based visas or any other work authorization for this position at this time.

Who We’re Looking For

Toyota Financial Services (TFS) Technology team is looking for a highly motivated person to fill a role as a Security Architect, Lead.

The primary responsibility of this role is to design the framework that specifies the organizational structure, standards, policies and functional behavior of our network to protect our organization's infrastructure from cyber threats. This role requires strong technical expertise in network security, excellent leadership skills, and the ability to collaborate effectively with cross-functional teams.

What you’ll be doing

• Operate in a global program that efficiently and effectively identify gaps and quantify risks (current and emerging), including the security and operational costs and the impact to the enterprise business processes  

• Development viable and supportable solutions according to those risks, creating security requirements and strategies for identity and access, infrastructure and network, logging and monitoring, application and software development, data, and endpoints  

• Operate in a program that assess the capabilities of technologies and how they play a role in the security posture to recommend short-term and long-term roadmaps to mature and maintain TFS’s overall security effectiveness 

• Design of Cyber Security technologies for TFS globally to appropriately address current and potential threat landscape 

• Partner with Enterprise Architecture and the business in capturing requirements to develop a viable technical architecture that securely enables the expected business functionality  

• Create, integrate, and validate the technical designs as secure patterns in support of identity and access, infrastructure and network, logging and monitoring, application and software development, data, and endpoints, supporting business intelligence, functions, and processes  

• Execute established frameworks to aid in the maturing and optimization of security controls and services, or recommend alternatives to increase the security posture while optimizing ROI  

• Exhibit a detailed understanding of cyber security, information technology, operating systems, protocols, cloud and on-premises networking, large data environments, cloud orchestration, and automation solutions  

• Act as a key resource for Threat Modeling across TFS group companies  

• Articulate an advanced knowledge of secure designing and/ or implementing secure Cloud environments, through cloud identities, software-defined and borderless networks, serverless, container, and composable architectures, and other security controls and technologies  

• Integrate security requirements with identity stores, relational databases, application servers, and physical access management systems  

• Engage in complex problem solving throughout the SDLC, overseeing, from a security perspective, the build, test, and deployment processes, supporting and advocating for secure automation, and system monitoring 

• Design and develop controls, patterns, and strategies to identify and address security gaps in deployed infrastructure, software, applications, and data systems  

• Validate the secure design and implementation of deployed software and applications to ensure appropriate use of secure APIs, data stores and models, web and app services, microservices and co