Security Governance Manager

Job Description

This position is responsible for continuously improving Toyota Material Handling North Americas enterprisewide security programs governance risk management and compliance capabilities. The role will position security governance and capabilities as a business enabler and strategic differentiator to TMHNA business unit operations equity dealers and independent dealers.

The ideal candidate will act as a trusted advisor empowering team members to make riskaware decisions; a strategic enabler enhancing the value TMHNA delivers to our customers; and a vigilant guardian protecting TMHNAs associates and critical digital assets.

Key Responsibilities

Kaizen (continuously improve) security program maturity and governance for TMHNA business unit and equity dealers
Collaborate with TMHNA business units to ensure compliance and risk management strategies integrate into overall business operations.
Advocate and liaison with independent dealers for security maturity governance and technical capabilities
Liaison with internal and external auditors to maintain and implement controls for compliance and privacy.
Lead TMHNA enterprisewide (including independent dealers) cybersecurity risk assessments and implement mitigation strategies.
Maintain strong oversight of third parties vendors and business partners to safeguard against undue risk presented by external entities.
Monitor current and proposed security changes impacting regulatory privacy and security industry best practice guidance.
Define metrics to assess the security programs success and provide regular reports to security and business leadership.

Qualifications/Requirements

Bachelors degree in computer science information assurance cybersecurity or related field or equivalent industry experience.
At least 5 years experience in cybersecurity as a practitioner and at least 3 years of exposure to various security frameworks.
Experience with OT/IoT Cybersecurity is a bonus.
CISSP or CISM (required); CRISC or additional security certifications are a certification a plus.
Strong business acumen and security technology skills for wellrounded proficiency and proven ability to align with security practices and compliance responsibilities.
Experience and understanding of various regulatory requirements and laws including but not limited to PCI SOX CCPA GDPR and GLBA.
Experience in one or more: ISO 27001/2 ITIL or NIST.
Exceptional written and verbal communication skills and proven ability to translate security and risk to all levels of the business.
Capacity to understand legacy progressive technology security controls and respective risks. Knowledge of cloud computing DevOps and application security is required.
Uptodate understanding of a wide range of incident response system configuration vulnerability management and hardening guidelines.
Track record of acting with integrity taking pride in work seeking to excel being curious and adaptable and communicating effectively.

Pisquare technologies is a Michigan (USA) Headquartered Automotive Embedded Engineering Services company Synergy Partner for major OEMs and Tier 1s and their implementation partners in Automotive Embedded Product Development Projects Requirements Analysis Software Design Software Implementation Efficient Build Release Process and turnkey software V & V Services. We have more than 20 years of industry expertise with specialization in the latest cuttingedge automotive technologies such as Infotainment connected vehicles Cyber security OTA and Advanced Safety/ Body electronics.