TFSB Information Security Risk Manager

Who we are Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like  one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream.

Do. Grow. with us. An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, ‘job flexibility benefits’ [also known as I-140 or Adjustment of Status portability], etc.)

now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

The Toyota Financial Savings Bank is looking for a passionate and highly motivated TFSB Information Security Risk Manager. Reporting to the TFSB Chief Information Security Officer (CISO), this person will be the primary owner responsible for building, implementing, and managing the bank's enterprise-wide Cyber Risk Management Framework (RMF). The ideal candidate will be a strategic leader who can establish a structured, repeatable, and transparent process for managing cyber risk across the organization.

You will serve as the central point of authority for Cyber Risk Management, interfacing with senior leadership, internal audit, and regulators to ensure the program's effectiveness and drive a mature, risk‑aware culture throughout the bank.

Develop, document, and maintain all cyber risk management policies, standards, procedures, and methodologies based on the NIST Risk Management framework. Lead the execution of the cyber risk management lifecycle for all in‑scope information systems, including system categorization, security control selection, implementation guidance, and effectiveness assessments. Manage the formal system authorization process, preparing risk‑based recommendations and authorization packages for senior leadership to review and approve.

Oversee the bank's master security control catalog and ensure it is kept current with emerging threats and regulatory requirements. Establish and mature a continuous monitoring strategy to ensure systems maintain an acceptable security posture. Administer and configure the Governance, Risk, and Compliance (GRC) platform that underpins the RMF program. Develop and report on Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) to provide leadership with a clear view of the enterprise risk landscape.

Serve as the primary liaison between system owners, IT teams, and security functions to facilitate risk assessments and track remediation activities.

A core understanding of banking‑specific Information Technology & Security regulations, including deep familiarity with FDIC and FFIEC Examination Handbooks. Minimum 7 years of previous experience in Information Security, IT Audit, or Technology Risk Management, with at least 3 years in a program management or leadership capacity.…