Virtual Information Security Officer

Overview

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world's most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We're looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

To save time applying, Toyota does not offer sponsorship of job applicants for employment-based visas or any other work authorization for this position at this time.

Who We're Looking For

Toyota Financial Services (TFS) is seeking a Consultant, Virtual Information Security Officer (vISO) to support the information security programs of one or more TFS Group companies.

This role serves as a trusted security advisor - collaborating with business and technology leaders, communicating key risks, and helping ensure that security considerations are embedded into business initiatives and technology decisions.

The Consultant will work within the Global Information Security Services organization and coordinate closely with teams across the broader TFS Group, with an emphasis on the Americas-Oceania Region.

What you'll be doing

Security Advisory & Business Partnership

• Act as a security advisor to assigned TFS Group companies, integrating into their management-level discussions and security project planning efforts.

• Collaborate with business leaders to ensure security considerations are addressed early and consistently within initiatives and solutions.

• Help communicate security risks, issues, and mitigation options to management teams in a clear and practical manner.

• Support the promotion of a security-aware culture across assigned business units.

Security Program Support

• Assist in developing and evolving multi-year security roadmaps and strategies aligned to business priorities.

• Contribute to maturing the Information Security program by identifying opportunities for improvement and recommending security services or controls that meet business needs.

• Support the collection, preparation, and delivery of relevant security metrics and reports for management review.

• Help ensure that identified vulnerabilities, audit findings, or assessment results are tracked and that remediation plans are properly documented and monitored.

Governance, Compliance & Policy Alignment

• Evaluate security policies, standards, and controls to ensure alignment with global TFS cybersecurity expectations.

• Support awareness of applicable security and privacy regulations (e.g., FFIEC, CCPA, GDPR, LGPD) and their impact on systems, processes, and technologies.

• Assist in evaluating system security requirements throughout solution lifecycle phases.

Technical & Control Assessment

• Contribute to assessments of cybersecurity safeguards - such as firewalls, intrusion prevention systems, web application firewalls, endpoint protection, DLP, encryption, and vulnerability management tooling - to ensure they meet expected security standards.

• Help review cybersecurity designs for systems and networks with varying classification levels and control needs.

• Provide general guidance on appropriate technical controls to reduce risk and support business and technology teams during design or implementation.

What You Bring

• Strong communication skills with the ability to clearly articulate security topics to non-technical and technical audiences.

• Ability to influence decisions and collaborate with diverse teams, even without formal authority.

• Effective project coordination skills with the ability to support multiple initiatives concurrently.

• 7-10 years of experience in information security or a related field, including experience contributing to or operating a security program.

• Working knowledge of enterprise security technologies (firewalls, IDS/IPS, SIEM, endpoint protection, CASB, DLP, vulnerability scanners, SSO).

• Familiarity with core security processes such as access governance, Secure SDLC, vulnerability management, incident response, and data protection.

• Exposure to cloud security concepts and controls in platforms like AWS, Azure, or Google Cloud Platform.

• Strong understanding of security frameworks such as NIST CSF, ISO 27001, CIS Controls, OWASP, and CRI Profile.

Added bonus if you have

• Spanish and/or Portuguese language proficiency.

• Security certifications such as CISSP, CISM, CISA, or equivalent.

• Experience conducting audits or reviews of systems and technical controls.

• Familiarity with global or regional privacy and security regulations.

What We'll Bring

During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:

• A work environment built on teamwork, flexibility, and respect.

• Professional growth and development programs to help advance your career, as well as tuition reimbursement.

• Team Member Vehicle Purchase Discount.

• Toyota Team Member Lease Vehicle Program (if applicable).

• Comprehensive health care and wellness plans for your entire family.

• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute.

• Paid holidays and paid time off.

• Referral services related to prenatal services, adoption, childcare, schools, and more.

• Relocation assistance (if applicable).

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star. Toyota is proud to have 10+ different Business Partnering Groups across 100 different North American chapter locations that support team members' efforts to dream, do and grow without questioning that they belong.

Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.

Have a question, need assistance with your application or do you require any special accommodations? Please send an email to .