Senior Engineer - Cybersecurity Risk & Operations Management Developer

Toyota Motors - Plano, TX

Full-time - Mid Level

Hybrid - Plano, TX

Transportation Equipment Manufacturing

About the position

Toyota's Cyber Security Risk Management Department is seeking a passionate and highly motivated Senior Analyst - Cybersecurity Risk & Operations Management Developer. This role is pivotal in designing and implementing new risk management capabilities while also supporting and enhancing existing ones. The position is based in Plano, TX, and offers a hybrid work model that includes both in-office and remote work. The primary responsibility of this role is to develop and support Governance, Risk, and Compliance (GRC) technology tools such as Archer, OneTrust, and ServiceNow, which are essential for automating risk management processes including risk assessments and mitigation strategies. The individual will report to the Manager and will play a crucial role in supporting the Governance, Risk, and Compliance department's mission to establish Toyota as a global leader in cybersecurity within the mobility sector. In this role, the Senior Analyst will provide technical expertise for Integrated Risk Management Tools, develop responsive applications using various programming languages and frameworks, and ensure optimal use of the ServiceNow platform. The position also involves creating and maintaining technical documentation, participating in the administration of ServiceNow, and evaluating the latest releases and enhancements in the GRC module. Collaboration with various teams, including cybersecurity, product, and internal audit, is essential to ensure compliance with legal and regulatory frameworks. The Senior Analyst will also identify opportunities for process optimization and automation, working closely with the Cyber Risk & Operations Management team to assist in requirements gathering and data migration into the GRC platform.

Responsibilities

• Develop and support GRC technology tools (Archer, OneTrust, Security, ServiceNow, etc.) used to enable and automate risk management processes.
• Provide technical expertise for Integrated Risk Management Tools (Archer, OneTrust, Security, ServiceNow, etc.).
• Develop responsive applications using JavaScript framework, HTML, CSS, .net core, C#, and XML, and ServiceNow APIs.
• Provide guidance to the GRC and IT teams to ensure the optimal use of the ServiceNow platform.
• Create and maintain technical documentation, such as design specifications, user guides, process documentation, and configuration details.
• Maintain and support the GRC tool to create standardization and automation of security risk assessments, KPIs, and KRIs.
• Participate actively in the administration of ServiceNow, encompassing upgrades, updates, and maintenance tasks as needed for GRC modules.
• Evaluate and adopt the latest ServiceNow releases, enhancements in the GRC module, and best practices for continuous improvement.
• Collaborate with product owners, designers, and platform teams to define specifications and deliver features iteratively.
• Partner effectively with cybersecurity, product, platform, internal audit, legal, and other internal peers to support TMNA's compliance with applicable legal, regulatory, and security frameworks.
• Follow best practices for designing and implementing ServiceNow solutions, ensuring configurations and developments are efficient, scalable, and sustainable.
• Identify opportunities for process optimization, automation, and streamlining tasks.
• Work closely with the Cyber Risk & Operations Management (CROM) team and assist in requirements gathering, analysis, design, and implementation of business processes and data migration into the GRC platform.

Requirements

• Bachelor's Degree (or higher) in Computer Science, Business Administration, Management Information Systems or related discipline, or equivalent professional work experience.
• Experience as a hands-on developer in ServiceNow GRC application.
• Experience working with ServiceNow modules, including Incident Management, Change Management, Problem Management, and Service Request Management.
• Experience with configuring ServiceNow GRC modules to align with governance, risk, and compliance frameworks.
• Experience in configuration of Policy and Compliance, Risk Management, Audit Management, and Vendor Risk Management Module in ServiceNow.
• Experience in working or coordinating with ServiceNow GRC support for product level defects.
• Experienced with development and/or management of metrics and reporting.
• Experience developing and managing integrations between ServiceNow GRC and other systems/tools using various integration methods.

Nice-to-haves

• ServiceNow System Administrator Certification
• Superb analytical and problem-solving abilities in complex situations using enterprise-wide thinking.
• Works with minimal supervision with some specific decision-making authority.
• Excellent communication skills (verbal and written) to tailor messages to different audiences.
• Ability to manage a wide variety of initiatives across multiple business units.
• At least one of the following Security certifications: CISM, CISA, CISSP, CIA, CIPM, CCSP.
• Experience working in Agile and/or Toyota Production System framework; Agile, Scrum, Lean, or related certifications.
• Experience building and/or analyzing GRC and Cybersecurity business cases and experience in product management.
• Demonstrated success in project management, business analysis, and data analysis.
• Proven ability to bring clarity and focus to complex and ambiguous situations.
• Experience with ITIL processes for Service Management.

Benefits

• A work environment built on teamwork, flexibility, and respect.
• Professional growth and development programs to help advance your career, as well as tuition reimbursement.
• Team Member Vehicle Purchase Discount.
• Toyota Team Member Lease Vehicle Program (if applicable).
• Comprehensive health care and wellness plans for your entire family.
• Flextime and virtual work options (if applicable).
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute.
• Paid holidays and paid time off.
• Referral services related to prenatal services, adoption, childcare, schools and more.
• Tax Advantaged Accounts (Health Savings Account, Health Care FSA, Dependent Care FSA)