Business Information Security Officer (BISO), Senior

Overview

Who we are

Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world's most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We're looking for talented team members who want to Dream. Do. Grow. with us.

An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment.

To save time applying, Toyota does not offer sponsorship of job applicants for employment-based visas or any other work authorization for this position at this time.

Who we're looking for

The Toyota Financial Services is looking for a passionate and highly motivated Information Security Senior Business Information Security Officer.


Reporting to the TMCC Information Security BISO Lead, this individual contributor serves as a strategic business partner, ensuring cybersecurity risks are clearly understood, proactively managed, and embedded into business decision-making.

The ideal candidate is highly collaborative, brings strong security and risk management expertise, and demonstrates executive presence-able to translate complex technical security risks into clear business outcomes and influence senior leaders across the organization.

What you'll be doing

Strategic Risk Leadership

• Lead identification, articulation, and management of material cybersecurity risks across assigned business domains
• Translate technical risks into clear business impact, trends, and decision options (mitigate / accept / transfer / avoid)
• Maintain an executive-ready view of top risks and risk posture aligned to business priorities

Executive Engagement & Influence

• Serve as a trusted advisor to VP, SVP, and executive stakeholders
• Lead risk discussions in business and executive forums with clear, concise narratives
• Influence business strategy, investment decisions, and technology direction through risk-informed insights
• Demonstrate strong executive presence, including the ability to constructively challenge decisions when risk is not adequately addressed

Collaboration & Partnership

• Build and sustain high-trust relationships across business, technology, and security teams
• Align stakeholders with competing priorities to ensure timely and effective risk management outcomes
• Partner with:
• Business leaders and product owners
• Domain Risk Leads (DRLs)
• Security Architecture, IAM, and Vulnerability teams
• IT delivery and operations

Early Engagement & Business Enablement

• Engage in planning and design phases of major initiatives to influence outcomes before decisions are locked
• Guide teams toward secure-by-design solutions using standard patterns and architectures
• Reduce late-stage surprises and rework by proactively identifying risks early

Risk Ownership & Decision Facilitation

• Ensure business leaders explicitly own cybersecurity risk, with documented decisions and accountability
• Facilitate clear alignment between:
  
  • Business objectives
  • Risk exposure
  • Remediation priorities
• Drive timely and well-informed risk treatment decisions

What you bring

• Deep expertise in cybersecurity risk management and business risk translation
• Strong executive presence and communication skills, with the ability to clearly articulate concepts to senior leaders
• Demonstrated ability to build trusted relationships and influence without authority
• Proven success operating in complex, cross-functional environments
• Strong understanding of enterprise security domains, including:
  
  • Identity and Access Management
  • Cloud Security
  • Data Protection and Security Architecture
  • Vulnerability and Configuration Management
• Ability to operate effectively in ambiguous environments

Added bonus if you have

• 10+ years of experience in:
  
  • Cybersecurity, information security, or technology risk
  • Financial services or regulated industry environments
• Prior experience working directly with:
  
  • Executive leadership
  • Enterprise transformation or large-scale initiatives
• Experience building or scaling BISO or embedded risk functions.

What we'll bring

During your interview process, our team can fill you in on all the details of our industry-leading benefits and career development opportunities. A few highlights include:

• A work environment built on teamwork, flexibility, and respect
• Professional growth and development programs to help advance your career, as well as tuition reimbursement
• Team Member Vehicle Purchase Discount
• Toyota Team Member Lease Vehicle Program (if applicable)
• Comprehensive health care and wellness plans for your entire family
• Toyota 401(k) Savings Plan featuring a company match, as well as an annual retirement contribution from Toyota regardless of whether you contribute
• Paid holidays and paid time off
• Referral services related to prenatal services, adoption, childcare, schools and more
• Relocation assistance (if applicable)

Belonging at Toyota

Our success begins and ends with our people. We embrace all perspectives and value unique human experiences. Respect for all is our North Star. Toyota is proud to have 10+ different Business Partnering Groups across 100 different North American chapter locations that support team members' efforts to dream, do and grow without questioning that they belong.

Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, military or veteran status, or any other characteristics protected by law.

Have a question, need assistance with your application or do you require any special accommodations? Please send an email to View email address on click.appcast.io.