Cyber Risk Assurance, Lead

Overview

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

Cyber Risk Assurance, Lead

Plano, TX

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for diverse, talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

Excited to grow your career at Toyota? 

We value our talented employees, and whenever possible strive to help one of our associates grow professionally before recruiting new talent to our open positions. If you think the open position you see is right for you, we encourage you to apply! 

Our people make all the difference in our success. 

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company – delivering on Toyota’s vision to move people beyond what’s possible. At TFS, you will help create best-in-class customer experiences in an innovative, collaborative environment. 

To save time applying, Toyota does not offer sponsorship of job applicants for employment-based visas or any other work authorization for this position at this time. 

Position Overview As a Cyber Risk Assurance Lead, you will be responsible for designing, managing, and maturing the Information Security Governance, Risk, and Compliance program. In this role, you will engage with leaders across the organization (e.. Information Security, Data and Technology, Legal, Privacy, etc.) to establish and mature the GRC program and supporting processes.

This leader must demonstrate broad knowledge of Information Security processes, as well as a strong understanding of industry frameworks (e.g. NIST CSF, ISO 27001, PCI DSS, etc.), and regulatory requirements (e.g. Sarbanes-Oxley, CFPB, FFIEC, etc.).

What you will be doing:

• Cybersecurity Governance Strategy: Develop and implement a comprehensive cybersecurity governance strategy aligned with organizational goals, risk management, regulatory needs, and industry best practices.

• Policy Development: Create, update, and enforce cybersecurity policies, standards, and processes to ensure compliance with regulations and industry standards. Stay current with changes to existing regulations and newly emerging regulations or industry guidance applicable to Toyota companies and provide timely guidance regarding potentially impacting changes.

• Security Audits: Liaise with stakeholders to support security-related regulatory and statutory audit and assessment activities.

• Compliance: Manage the remediation of audit and assessment findings by partnering closely with Information Security leaders and other stakeholders to develop remediation plans and ensuring the countermeasures are in place on a timely basis.

• Dashboards and reporting: Develop and manage clear risk and compliance dashboards, that