Senior Third-Party Cyber Security Risk Analyst

Job description

Overview

Who we are Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us. An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America.

While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment. Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future.

You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, ‘job flexibility benefits’ [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who we’re looking for Toyota’s Cyber Risk Department is looking for a passionate and highly motivated Senior Third Party Cybersecurity Risk Analyst. The primary responsibility of this role is to conduct cybersecurity risk assessments for third parties across Toyota’s third-party portfolio. This role evaluates each third-party relationship to assess the associated risk profile and the effectiveness of the risk management capabilities in place, ensuring alignment with Toyota’s risk appetite.This position includes reviewing assurance artifacts such as SOC reports, ISO 27001 certifications, and PCI DSS certifications to evaluate the effectiveness of third-party cybersecurity controls.

The role also consolidates and communicates risk findings and metrics to operational management and executive leadership while partnering with internal stakeholders to support informed risk decisions and continuous improvement of third-party cybersecurity risk processes. This role requires strong analytical, critical thinking, and communication skills, along with a deep understanding of risk management practices and cybersecurity processes, risks, and controls, to effectively assess third-party risk and communicate findings to key stakeholders.

What you’ll be doing Conduct Cybersecurity Risk Assessments

Conduct third-party cybersecurity risk assessments to verify alignment with Toyota’s information security and risk management standards.

Inspect Assurance Reports

Review and analyze independent assurance artifacts, including SOC 1, SOC 2, ISO 27001 certifications, PCI DSS certifications, and related evidence, to validate control design and operating effectiveness.

Evaluate and Communicate Risk

Consolidate, interpret, and communicate cybersecurity risk metrics, trends, and findings to operational stakeholders and executive leadership.

Collaborate with Risk Partners

Partner with internal business, security, and risk teams to support informed third-party risk decisions and remediation efforts.

Support Continuous Improvement

Support continuous improvement of third-party risk processes, methodologies, and reporting practices. What you bring A bachelor's degree in computer science, information technology, or a related field. Experience in Information Security, Risk Management, Information Technology, or related disciplines. Experience in the planning, designing, implementation, and execution of third-party risk management programs. Excellent presentation skills, including verbal and written communication to differing levels of management throughout the organization.

Excellent “soft” skills including relationship building and the ability to influence others through consensus building. Added bonus if you have Certified Information Systems & Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Security Auditor (CISA) certifications. What we’ll bring During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities.

A few highlights include:

• A work environment built on teamwork, flexibility, and respect
• Professional growth and development programs to help advance your career, as well as tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute (if applicable)
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• Relocation assistance (if applicable) Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star. Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law. Have a question, need assistance with your application or do you require any special accommodations?

Please send an email to [email protected] .