Business Information Security Officer (BISO), Senior

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

Who we’re looking for

The Toyota Financial Services is looking for a passionate and highly motivated Information Security Senior Business Information Security Officer.

Reporting to the TMCC Information Security BISO Lead, this individual contributor serves as a strategic business partner, ensuring cybersecurity risks are clearly understood, proactively managed, and embedded into business decision-making.

The ideal candidate is highly collaborative, brings strong security and risk management expertise, and demonstrates executive presence—able to translate complex technical security risks into clear business outcomes and influence senior leaders across the organization.

What you’ll be doing

Strategic Risk Leadership

• Lead identification, articulation, and management of material cybersecurity risks across assigned business domains

• Translate technical risks into clear business impact, trends, and decision options (mitigate / accept / transfer / avoid)

• Maintain an executive-ready view of top risks and risk posture aligned to business priorities

Executive Engagement & Influence

• Serve as a trusted advisor to VP, SVP, and executive stakeholders

• Lead risk discussions in business and executive forums with clear, concise narratives

• Influence business strategy, investment decisions, and technology direction through risk-informed insights

• Demonstrate strong executive presence, including the ability to constructively challenge decisions when risk is not adequately addressed

Collaboration & Partnership

• Build and sustain high-trust relationships across business, technology, and security teams

• Align stakeholders with competing priorities to ensure timely and effective risk management outcomes

• Partner with:

• Business leaders and product owners

• Domain Risk Leads (DRLs)

• Security Architecture, IAM, and Vulnerability teams

• IT delivery and operations

Early Engagement & Business Enablement

• Engage in planning and design phases of major initiatives to influence outcomes before decisions are locked

• Guide teams toward secure-by-design solutions using standard patterns and architectures

• Reduce late-stage surprises and rework by proactively identifying risks early

Risk Ownership & Decision Facilitation

• Ensure business leaders explicitly own cybersecurity risk, with documented decisions and accountability

• Facilitate clear alignment between:

  • Business objectives

  • Risk exposure

  • Remediation priorities

• Drive timely and well-informed risk treatment decisions

What you bring

• Deep expertise in cybersecurity risk management and business risk translation

• Strong executive presence and communication skills, with the ability to clearly articulate concepts to senior leaders

• Demonstrated ability to build trusted relationships and influence without authority

• Proven success operating in complex, cross-functional environments

• Strong understanding of enterprise security domains, including:

  • Identity and Access Management

  • Cloud Security

  • Data Protection and Security Architecture

  • Vulnerability and Configuration Management

• Ability to operate effectively in ambiguous environments

Added bonus if you have

• 10+ years of experience in:

  • Cybersecurity, information security, or technology risk

  • Financial services or regulated industry environments

• Prior experience working directly with:

  • Executive leadership

  • Enterprise transformation or large-scale initiatives

• Experience building or scaling BISO or embedded risk functions.

What we’ll bring

During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:

• A work environment built on teamwork, flexibility, and respect

• Professional growth and development programs to help advance your career, as well as tuition reimbursement

• Team Member Vehicle Purchase Discount

• Toyota Team Member Lease Vehicle Program (if applicable)

• Comprehensive health care and wellness plans for your entire family

• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute

• Paid holidays and paid time off

• Referral services related to prenatal services, adoption, childcare, schools and more

• Relocation assistance (if applicable)