Domain Risk Lead - VPP
Listed on 2026-02-23
-
IT/Tech
Cybersecurity, Information Security, IT Business Analyst, IT Project Manager
Overview
Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow.
with us.
An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota s vision to move people beyond what s possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.
To save time applying, Toyota does not offer sponsorship of job applicants for employment-based visas or any other work authorization for this position at this time.
Who we areWho we’re looking for
The Enterprise Risk Department for Toyota Financial Services is looking for a passionate and highly motivated Domain Risk Lead
.
Reporting to the National Manager, Domain Risk Leads, the Domain Risk Lead will play a critical role in advancing the IT Risk department’s mission by executing established risk assessment frameworks for IT and Data Risk. This includes ensuring alignment with COBIT and other recognized IT and Data Management standards, while integrating these practices into the broader Enterprise Risk Management (ERM) framework.
Through proactive risk oversight and governance, the Domain Risk Leader is accountable for ensuring that technology releases meet quality expectations and that any residual risks are clearly articulated, enabling informed decision-making across the business.
This position is based in Plano, Texas. The selected candidate will be expected to reside within commutable distance of this location.
What you’ll be doing- Manage and execute the risk management framework in alignment with enterprise risk appetite and business objectives within the domain.
- Lead efforts to identify emerging and existing risks, conduct risk assessments, and maintain a dynamic risk register.
- Develop risk mitigation plans to limit unreasonable risk exposure to the organization; incorporate risk management practice into everyday operations.
- Ensure compliance with internal policies, organizational standards, and applicable regulatory requirements.
- Oversee domain-specific risk incidents, root cause analysis, and remediation tracking.
- Evaluate the design and performance of controls; recommend enhancements to strengthen the control environment.
- Lead and execute annual technology risk assessments within the domain, ensuring comprehensive coverage and actionable insights.
- Deliver timely and insightful risk reporting to senior leadership to report risks, findings and remediation plans within the domain.
- Bachelor’s degree (or higher)
- 5+ years of experience in IT risk management, audit, and/or cybersecurity
- Knowledge of banking regulations and industry frameworks
- Strong analytical and problem-solving abilities
- Experience with managing risk for enterprise technology and data
- Deep understanding of risk frameworks such as COBIT, NIST, and ISO 27001
- Implementation and/or use of GRC systems
- Experience with operational risk management and/or auditing (Sarbanes Oxley, SOX, FFIEC requirements)
- Familiarity with security best practices for enterprise systems, including encryption, access control, and monitoring
- Working knowledge of the principles of technology and data risk management including ITGCs, IT application controls, GLBA, Information Security, Release Management, CI/CD, control design, and testing within complex enterprise data environments.
- Advanced degree
- Certified Information Systems Auditor (CISA)
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:
- A work…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).