Technology & Cybersecurity Risk Management Analyst

Toyota Tsusho Systems US, Inc. develops IT, cybersecurity, and technology solutions supporting Toyota’s global business operations. The Technology & Cybersecurity Risk Management Analyst supports the technology and cybersecurity risk management program by conducting risk assessments, evaluating controls, documenting findings, and guiding stakeholders through risk-based decision-making. The role also develops risk treatment recommendations, tracks remediation, and prepares executive-ready reports and dashboards.

What you'll do:

• Conduct risk intake, assessments, triage sessions, and stakeholder risk discussions
• Assess technology and cybersecurity risks using NIST, COBIT, and ISO frameworks
• Identify, document, and evaluate inherent, residual, and emerging technology risks
• Review controls and evaluate their effectiveness in mitigating identified risks
• Map risks to controls and applicable framework and policy requirements
• Facilitate control walkthroughs and risk discussions with control owners and stakeholders
• Document risk statements, controls, evidence, and assessment results in governance tools and Word/Excel/PPT
• Develop risk treatment recommendations and track remediation activities through closure
• Escalate overdue actions, unresolved risks, and significant control or compliance concerns
• Prepare executive-ready risk reports, dashboards, and governance presentation materials

What they're looking for:

• Technology and Cybersecurity Fundamentals: Demonstrates a solid understanding of security controls, threats, and risk concepts
• NIST, COBIT, and ISO 27001 framework knowledge
• Risk Assessment & Analysis: Ability to identify, assess, and document technology and cybersecurity risks and control gaps
• Understanding of control design, control effectiveness, and risk mitigation concepts
• Project Management: Effectively plans, tracks, and executes work across multiple concurrent initiatives
• Process Improvement: Identifies opportunities to streamline workflows and improve operational efficiency
• Stakeholder Collaboration: Works effectively with cross‑functional teams and external partners
• Communication: Clearly communicates technical risk information to both technical and non‑technical audiences
• Attention to Detail: Produces accurate, well‑documented assessments and maintains reliable risk records
• Tool proficiency: Microsoft Word, Excel, PowerPoint, and CoPilot. ServiceNow
• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Business, or a related field (or equivalent experience)
• 1–3 years of experience in cybersecurity or technology risk management, IT risk, cybersecurity, compliance, or related discipline

Benefits:

• Hybrid work arrangement