Sr. Analyst, Infrastructure and InfoSec

Overview Who we are Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow.

with us. Primary Job Accountabilities Information / Cyber Security (InfoSec) Security Governance Attain a strong understanding of business processes, policies, procedures, governance practices and regulatory requirements. Ensure all processes and technologies are compliant with TFS Information Security standards (GISG, TMCC, etc.). Complete monthly report of Key Risk Indicators for IT Security Department including vulnerabilities scores, endpoint compliance, material incidents, etc.

Provide InfoSec status to ERMC committee when needed. Identify non-compliance to security standards or controls and submit exceptions for approval. Provide status and metrics of information security activities and review with Information Security Officer (ISO) and AOR GISG regional representative for TCPR. Attend AOR InfoSec-GISG/GISS meetings to learn best practices and updated activities for InfoSec.

Communicate updates pertaining to TCPR. Access Administration Ensure  access to information assets is authorized by management and asset owners. Ensure that user access is monitored and regularly reviewed (attestation). Ensure new hires are provided with equipment and access in a timely manner. Ensure the access for terminated users are removed in a timely matter. Security Awareness Manage and conduct all required security training.

Ensure that all team members and new hires complete the required security awareness training. Report to IT Manager the list of team members who are not in compliance with training or fail phishing tests. Comply with all continued education requirements, including professional courses, certifications, seminars, trainings, etc., to support the business need. Information Asset Management Ensure security requirements are addressed throughout the lifecycle of all TCPR assets.

Ensure inventories of information assets; including on-premises/cloud network, servers/ workstations, operating systems, applications, and mobile computers and devices are securely configured and issued. Ensure with TMCC that all network devices, servers, workstations, mobile devices, and all other endpoints are protected and monitored for malicious activities. Vulnerability and Endpoint Management Identify and track system and application vulnerabilities.

Perform research and analysis of complex vulnerability incidents until resolved to ensure compliance metrics are being met. This includes cross collaboration to obtain root cause, recommend and determine best fix and apply patch. Work with IT and other resources on vulnerability remediation plans including dates for remediation and responsibilities. Monitor status and progress of remediation and report to IT Manager.

Provide TCPR’s ISO with periodic status updates on remedial efforts. Monitor endpoint protection compliance to ensure metric is met weekly for monthly reporting. If issues are found must review, research, and analyze to resolve. Security Operations and Infrastructure Oversee technological upgrades, tasks, improvements, and major changes to the information security environment. Support the security infrastructure and technologies established for TCPR.

Conduct logging of network and system activities (users, local applications, access to physical assets, etc.). Monitor logs and other sources of information (users, applications, networks, systems, access to physical assets, etc.). Analyze, assess, and address suspected malicious activities and escalate appropriately. Incident Response and Management Member of the Security Incident Response Team (SIRT) as a technical SME.

Assist the ISO with sec