Domain Risk Lead - Banking & Commercial Lending

Overview

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, 'job flexibility benefits' [also known as I-140 or Adjustment of Status portability], etc.) now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future.

Who we’re looking for

• Reporting to the National Manager, Domain Risk Leads, the Domain Risk Lead will play a critical role in advancing the IT Risk department’s mission by executing established risk assessment frameworks for IT and Data Risk. This includes ensuring alignment with COBIT and other recognized IT and Data Management standards, while integrating these practices into the broader Enterprise Risk Management (ERM) framework.
• Through proactive risk oversight and governance, the Domain Risk Leader is accountable for ensuring that technology releases meet quality expectations and that any residual risks are clearly articulated, enabling informed decision-making across the business.

What you’ll be doing

• •Own and govern the domain risk management framework in alignment with enterprise risk appetite, strategic priorities, and business objectives.
• •Direct the maintenance of a comprehensive, continuously updated risk register, ensuring risks are accurately documented, tracked, and actioned.
• •Develop and implement risk mitigation strategies that materially reduce exposure to the organization and embed risk management into core business operations.
• •Ensure adherence to internal policies, organizational standards, and applicable regulatory and control requirements.
• •Lead oversight of domain risk incidents, root cause analysis, corrective actions, and remediation tracking to closure.
• •Evaluate the design and effectiveness of controls and recommend enhancements to strengthen the control environment.
• •Lead annual technology risk assessments and ensure outcomes are actionable, risk-based, and aligned to business and enterprise expectations
• •Deliver concise, high-impact risk reporting and executive communications to senior leadership on key risks, findings, trends, and remediation progress.
• •Serve as a trusted advisor to senior stakeholders, influencing decisions and promoting a strong risk-aware culture across the domain.

What you bring

• •Bachelor's degree in BA or BS
• •7+ years of experience in IT risk management, audit, or cybersecurity experience
• •Strong analytical and problem-solving abilities
• •Experience with managing risk for enterprise technology and data
• •Deep understanding of risk frameworks such as COBIT, NIST, and ISO 27001
• •Implementation and/or use of GRC systems
• •Experience with operational risk management and/or auditing, Sarbanes Oxley, (SOX), FFIEC requirements
• •Familiarity with security best practices for enterprise systems, including encryption, access control, and monitoring
• •Working knowledge or the principles of technology and data risk management including ITGCs, IT application controls, GLBA, Information Security, Release Management, CI/CD, control design, and testing within complex enterprise data environments
• •Banking Regulations and Industry Frameworks preferably working in a banking institution

Added bonus if you have

• •Masters or graduate degree
• •10+ years of experience in IT risk management, audit, or cybersecurity experience
• •Certified Information Systems Auditor (CISA)
• •Certified Information Systems Security Professional (CISSP)
• •Certified Information Security Manager (CISM)
• •Certified Risk in Risk and Information Systems Control (CRISC)
• •Prior working experience using Archer GRC
• •Experience implementing/designing controls related to AI or Cloud technology

What we’ll bring

• During your interview process, our team can fill you in on all the details of our industry-leading benefits and career
• development opportunities. A few highlights include:
• •A work environment built on teamwork, flexibility, and respect
• •Professional growth and development programs to help advance your career, as well as tuition reimbursement
• •Team Member Vehicle Purchase Discount
• •Toyota Team Member Lease Vehicle Program (if applicable)
• •Comprehensive health care and wellness plans for your entire family
• •Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota
• regardless of whether you contribute (if applicable)
• •Paid holidays and paid time off
• •Referral services related to prenatal services, adoption, childcare, schools and more
• •Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)
• •Relocation assistance (if applicable)

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star.

Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.

Have a question, need assistance with your application or do you require any special accommodations? Please send an email to talent.acquisition@toyota.com .