Senior Consultant, Virtual Chief Information Security Officer

Toyota Motors - Plano, TX

Full-time - Senior

Hybrid - Plano, TX

Transportation Equipment Manufacturing

About the position

The Senior Consultant, Virtual Chief Information Security Officer (vCISO) at Toyota Financial Services (TFS) is a pivotal role responsible for leading the Information Security program across assigned TFS Group companies. This position involves direct engagement with executive leadership to communicate security issues, risks, and remediation strategies, ensuring alignment with statutory requirements and regulations. The vCISO will advocate for security improvements, drive maturity, and reduce risks while collaborating with various teams to enhance the overall security posture of the organization.

Responsibilities

• Integrate with and lead executive-level conversations to ensure collaborative security inclusion in business initiatives.
• Collaborate with and influence business units and third-party vendors on security controls for managing risk.
• Develop and influence multi-year security roadmaps and strategies for assigned companies.
• Mature the Information Security program proactively to meet business needs.
• Present key security risk metrics and reports to executive leadership to drive awareness and action.
• Promote security awareness among management and align security principles with organizational goals.
• Acquire and manage resources to support security goals and objectives.
• Create and maintain an information security-conscious culture within assigned companies.
• Represent assigned companies in executive meetings, committees, and vendor relationships.
• Evaluate policies and standards to ensure compliance with cybersecurity policies.
• Monitor and evaluate the effectiveness of cybersecurity safeguards.
• Identify security requirements for IT systems throughout their lifecycle.
• Ensure action plans are in place for vulnerabilities identified during assessments.
• Oversee the development of cybersecurity designs for systems and networks with varying security requirements.
• Evaluate protective controls to meet organizational security standards.

Requirements

• 10+ years of experience in information security or a similar field, with at least 5 years in a senior security manager/consultant role.
• Concise and polished executive presence and communication skills, both written and verbal.
• Exceptional leadership, project, and team-building skills.
• Ability to translate business needs into practical security solutions and identify associated risks.
• Detailed understanding of security strategies and industry-leading program design.
• Familiarity with common security technology solutions and processes.
• Knowledge of security frameworks including ISO 27001, NIST, and OWASP Top 20.
• Experience designing security in large public cloud technologies (AWS/Azure/GCP).

Nice-to-haves

• Spanish language proficiency.
• Experience conducting audits or reviews of technical systems.
• Security profession certification such as CISSP, CCISO, CCSP, CCSK, ISSAP, etc.
• Experience with security/privacy regulations/frameworks across US and international markets.

Benefits

• A work environment built on teamwork, flexibility, and respect.
• Professional growth and development programs, including tuition reimbursement.
• Team Member Vehicle Purchase Discount.
• Toyota Team Member Lease Vehicle Program.
• Comprehensive health care and wellness plans for families.
• Flextime and virtual work options.
• Toyota 401(k) Savings Plan with company match and annual contribution.
• Paid holidays and paid time off.
• Referral services for prenatal services, adoption, childcare, and schools.
• Flexible spending accounts.
• Relocation assistance.