CROM Third-Party Cyber Risk Management Senior Engineer
Overview
Who we're looking for
Toyota’s Cybersecurity and Risk Management (CSRM) Department is looking for a passionate and highly motivated Third-Party Cyber Risk Management (TPCRM) Engineer II.
The primary responsibility of this role is to collaborate with a wide range of internal Toyota business groups and with external third parties.
Work with internal members to recommend and implement process improvements related to daily work to improve efficiency and results for the TPCRM program.
Work with third parties to assess cybersecurity posture and support remediation activities. This position requires an understanding of Cybersecurity, a strong passion to learn the TPCRM Program, inquisitiveness about the processes to identify improvement opportunities, and a strong team player.
Reporting to the TPCRM Manager, the person in this role will support the CSRM department's objective to become a global cybersecurity leader in the mobility space by using leading cybersecurity capabilities including :
Connected vehicles .
Contactless customer experience
A secure, modern workplace for employees
Third-Party Cybersecurity Risk Management (TPCRM)
We are looking for self-motivated individuals who want to grow in their capabilities and contribute to the overall TPCRM Program enhancements to support Toyota’s expansive ecosystem.
What you'll be doing
Collaborate with internal Toyota groups such as Purchasing, Indirect Procurement, Retail Market Development Operations, IT Business Partners, etc.
to gather a holistic Third-Party Universe for Toyota Motor North America that can be systemically updated and maintained with an accurate count.
Track TPCRM Inherent Risk Assessment (IRA) and Cyber Risk Assessment (CRA) status and final ratings as well as a mechanism to flag overdue items and escalate to Assessors responsible appropriately.
Develop and maintain a visual and repeatable Monthly Tracking Report on IRAs and CRAs completion rate, escalation status, and Third-Party Universe
Kick off IRAs with internal business functions and IT.
Recommend and implement process improvements related to daily work to improve efficiency and results for the TPCRM team and internal business functions.
Support TPCRM Team with coordinating TPCRM and Cybersecurity Awareness meetings, and Best Practices info-sharing sessions with internal business functions, Dealers, and Suppliers
Perform CRAs with low-risk Suppliers and shadow other assessors to learn the cybersecurity technical requirements, security and data controls needed in place, and how to navigate the technical landscape internally and externally with key stakeholders.
What you bring
Bachelor’s degree in computer science, other engineering, related field, or equivalent experience
Experience in IT and / or Cybersecurity
Experience in strategy, consulting, engineering, or other relevant discipline
Experience working in an environment requiring strong interpersonal skills collaboration, building trust, team player.
Experience using problem-solving abilities.
Experience using communication skills (verbal and written) to tailor messages to different audiences, presenting them clearly and concisely at the right altitude,
Experience leading or being an active participant in cross-functional projects or activities.
Experience working in an environment requiring management of a wide variety of initiatives across multiple business units.
Added bonus if you have
Experience in Compliance
Experience working in an environment requiring a proactive, motivated individual who can self-manage and execute once given strategic direction.
Experience working in an agile framework.
Experience building and / or analyzing financial business cases.
Experience in product management
Demonstrated success in project management, business analysis, and data analysis.
Proven ability to bring clarity and focus to complex and ambiguous situations.
What we'll bring
During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities.
A few highlights include :
A work environment built on teamwork, flexibility, and respect.
Professional growth and development programs to help advance your career, as well as tuition reimbursement.
Vehicle purchase & lease programs
Comprehensive health care and wellness plans for your entire family
Flextime and virtual work options (if applicable)
Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute.
Paid holidays and paid time off
Referral services related to prenatal services, adoption, childcare, schools and more.
Flexible spending accounts
CROM Third-Party Cyber Risk Management Senior Engineer
Toyota'sCybersecurity and Risk Management (CSRM)Department is looking for a passionate and highly motivatedThird-Party Cyber Risk Management (TPCRM) Engineer II. Third-Party Cybersecurity RiskManagement (TPCRM). Track TPCRM Inherent Risk Assessment (IRA) and Cyber Risk Assessment (CRA) status and fi...
VP Third Party Risk and Control Officer
The VP Third Party Risk and Control Officer is a strategic professional who stays abreast of developments within own field and contributes to directional strategy by considering their application in own job and the business. Responsible for managing and supporting multiple risk and control programs ...
Third Party Oversight Exam Management Lead - Vice President
A minimum of 7 years of experience in a cybersecurity, technology and operational controls, information security, technology audit, technology compliance, third party risk management governance or technology outsourcing discipline . Support key stakeholders and partners in understanding relevant asp...
Senior Palo Alto Firewall Engineer
The Senior Palo Alto Firewall Engineer will be responsible for the design, administration, and management of Palo Alto Firewalls using Centralized Panorama Management. Leidos QTC Health Services QTC is hiring a Senior Palo Alto Firewall Engineer. Conduct research, cost-benefit and return-on-investme...
Senior Software Engineer - Master Data Management
As a Senior Software Engineer (MDM) in CDO (Chief Data Office), you will partner with Architects, product owners, tech leads, designers, engineers and delivery professionals to improve MDM platform team. Technology - Engineering & Cloud. Enterprise Data Management is the brain that connects data...
Risk Management - Fraud Risk - Senior Associate
As a Fraud Risk Associate with the Consumer & Business Banking (CBB) Risk Management group, the successful candidate will be responsible for analysis related to various De-Risking and Controls agenda initiatives within the DDA New Account Originations area. As part of Risk Management and Compliance,...
Senior Identity Access Management Security Engineer
The Identity & Access Management Senior Security Engineer is responsible for acting as resource, leader, and peer coach with other engineers in the development, testing, implementation, and integration of Identity and Access Management systems and solutions. Identity Access Management Platforms: Sys...
USPB Operational Risk Senior Analyst – Issue Management Data Quality (Hybrid)
This position will be accountable for the quality and timely execution of issue submissions at both the pre-activation and pre-closure submissions within the Issue Management program Responsibilities include identifying and managing requirements to the Global Issue Management Policy, Standard, and P...
Enterprise Risk Management, Reputational Risk Oversight Senior Manager
Work closely with senior management and the risk management team to ensure alignment of reputation risk management efforts with overall risk management strategies. Develop and implement a comprehensive reputational risk management framework aligned with the organization’s risk appetite and strategic...
Risk Management - Transaction Risk - Senior Associate
As a Transaction Risk Management - Senior Associate, you play a key role in monitoring and reviewing intraday and overnight overdrafts that result from Treasury Service Products. As part of Risk Management and Compliance, you are at the center of keeping JPMorgan Chase strong and resilient. Our cult...