Cyber Security Program Manager

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, TN, 'job flexibility benefits' (also known as I-140 or Adjustment of Status portability), etc.

now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

These are accountabilities you are solely responsible for and will execute daily/weekly:

Lead the full delivery lifecycle for complex cybersecurity initiatives, including planning, execution, dependency management, milestone tracking, and delivery oversight across multiple work streams. Ensure committed objectives, timelines, and quality standards are met.

Drive the daily project cadence, including stand- ups, sprint planning, backlog refinement, sprint reviews, and retrospectives. Ensure work is prioritized appropriately, delivery progress is transparent, and impediments are escalated and resolved quickly.

Proactively identify, document, assess, and manage risks, issues, assumptions, and dependencies using structured frameworks such as RAID logs. Anticipate bottlenecks, implement corrective actions, and maintain delivery momentum across competing priorities.

Own and manage project and program budgets across all cost categories, including labor, technology, professional services, and vendor spend. Monitor actuals versus forecast, identify variances, and take corrective action to maintain financial alignment.

Provide clear, timely reporting to executive, management, and team-level stakeholders on scope, schedule, budget, quality, risks, and decisions. Maintain dashboards, scorecards, and program communications that support informed decision-making.

Partner with Release Management and other delivery teams to ensure cybersecurity deliverables move through release and change governance processes successfully. Confirm readiness, manage dependencies, and ensure all artifacts and approvals are aligned with enterprise controls.

Ensure cybersecurity initiatives are delivered in alignment with applicable regulations, standards, and internal policies such as NIST, GDPR, HIPAA, PCI-DSS, and enterprise control requirements. Partner with GRC, compliance, and risk teams to embed security obligations into execution.

Manage third‑party vendors and service providers to ensure contracted work is delivered on time, within scope, and to quality expectations. Support vendor selection, SOW development, milestone tracking, and performance reviews.

Own the cybersecurity intake process by triaging, categorizing, and prioritizing incoming requests. Ensure work is aligned to business objectives, strategically sequenced, and appropriately resourced.

These are areas where you actively participate and drive execution in partnership with other teams or leadership:

Strategic Roadmap Alignment: Partner with leaders across cybersecurity, technology, and business functions to maintain and evolve the cybersecurity product and project roadmap in alignment with enterprise priorities.

Cross-Functional Program Leadership: Lead multiple interdependent cybersecurity initiatives across engineering, architecture, operations, compliance, legal, procurement, and business teams to ensure alignment and execution against shared goals.

Governance and Decision Forums: Establish and operate program governance routines, escalation paths, dependency reviews, and decision-making forums to keep work moving and resolve cross-functional blockers.

Resource and Priority Tradeoff Management: C…