Senior Analyst - Technology & Cybersecurity Risk Management

Overview

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.

To save time applying, Toyota does not offer sponsorship of job applicants for employment-based visas or any other work authorization for this position at this time. 

Toyota's Cybersecurity & Risk Management (CSRM) group objective is to become a global cybersecurity leader in the mobility space - with the talent, scale, and services to enable our mission of securely bringing mobility for all.

We hope you will join us in this time of transformation and be a part of defining the next-generation cybersecurity capabilities for one of the largest global companies in the world.  #Cyber

Who we’re looking for 

Toyota is looking for team members who are passionate about technology and interested in joining a collaborative and highly motivated team as a Senior Analyst – Technology & Cybersecurity Risk Management. 

The primary responsibility of this role is to analyze technology and cybersecurity risks working closely with other technology teams and business functions.

Reporting to the Technology & Cybersecurity Risk Management’s Senior Manager, the person in this role will join the Risk & Operations Management team to visualize and reduce Toyota’s technology risk by integrating cybersecurity, privacy, and compliance disciplines.

What you’ll be doing

• Perform technology risk assessments for applications, network, devices, and platforms working closely with internal stakeholders (cybersecurity, technology, and business teams)

• Partner effectively with internal stakeholders to ensure business teams are compliant with TMNA Policies and standards as well as with established enterprise principles and frameworks

• Guide internal stakeholders through risk management processes including risk acceptance, exception, and remediation activity by understanding inherent risk, mitigating controls (security and administrative), and residual risk

• Work closely with top management to understand risk appetite for individual risk as well as aggregated risks in alignment with actual risk exposure to identify and prioritize countermeasures

• Drive cybersecurity and risk awareness and reinforce risk-based decisions through educating teams and leadership on the cybersecurity core risk management strategy and processes

What you bring

• Bachelor’s degree in computer science, other engineering, related field, or equivalent experience

• Experience in cybersecurity risk management supporting compliance to regulations and industry frameworks

  • Expert knowledge of cybersecurity risk management processes (both qualitative and quantitative)

  • Significant experience with compliance regulations/laws, security frameworks and standards (e.g., NIST, HIPAA, ISO, COBIT, OWASP, ITIL)

  • Excellent understanding of IT General Controls and their applicability to applications and systems with governance, risk, and compliance

• Experience in strategy, consulting, engineering, or other relevant discipline

  • Superb analytical and problem-solving abilities in complex situations using enterprise-wide thinking

  • Works with minimal supervision with some specific decision-making authority

Added bonus if you have

• CISA, CISSP, CIA, CIPM, or other related cybersecurity certifications

• Agile, Scrum, Lean, or related certifications

• Experience building and/or analyzing financial business cases, experience in product management

• Demonstrated success in project management, business analysis, and data analysis

• Proven ability to bring clarity and focus to complex and ambiguous situations

• Excellent communication skills (verbal and written) to tailor messages to different audiences, presenting it clearly and concisely at the right altitude

What We’ll Bring

During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:

• A work environment built on teamwork, flexib