Monitor and act on security alerts and advisories from the SOC team and other security tools

Perform triage, investigation, and escalation of security incidents

Support incident response activities

Stay informed on emerging threats, vulnerabilities, and attack techniques

Review vulnerability reports, assess exploitability of vulnerabilities, and coordinate remediation efforts

Support access governance processes, including access reviews, least privilege, and segregation of duties

Investigate access anomalies and unauthorized access attempts

Perform risk assessments of information systems and infrastructure; then develop and communicate mitigation recommendations

Conduct security risks assessments of vendors and service providers, including review of SOC2 reports and other security documentation

Track remediation of identified third-party risks

Support internal and external audits

Maintain and update security policies, standards, and procedures, and security training materials

Develop and maintain dashboards to track and report on key risks and compliance metrics

Prepare documentation and reporting materials for management

Support regular business continuity planning and disaster recovery initiatives

Identify and communicate current and emerging security threats to Senior Management

Collaborate with business units, application teams, and service partners to define and guide security controls that manage risk

Support phishing simulations and annual security awareness campaigns

Work with internal teams and affiliates on IT projects and act as a liaison with Toyota’s Global Information Security Group (GISG)

Qualification

Represents the skills you have

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Information SecurityVulnerability ManagementIAM toolsEndpoint Security toolsPrivilege Access Management toolsNetwork SecurityCloud SecurityAuthentication MethodsData Loss Prevention (DLP)Software Development Life Cycle (SDLC)API SecurityCertified Information Systems Security Professional (CISSP)Certified Cloud Security Professional (CCSP)Information Systems Security Architecture Professional (ISSAP)AWS Certified Security SpecialtyCertified Cloud Security Knowledge (CCSK)Required

5+ years' experience as an information security analyst, preferably in the Banking or Financial services industry

Post-secondary education in Computer Science/Engineering or related field

Experience working with: Vulnerability management tools (e.g., Qualys), IAM tools (e.g., SailPoint, Okta), Endpoint security tools (e.g., CrowdStrike), Privilege Access Management tools (e.g. CyberArk)

Understanding of: Network security concepts (firewalls, VPNs, segmentation, zero trust), Cloud security fundamentals (Azure, AWS), Authentication methods (MFA, SSO), DLP, SDLC processes, API security

Strong analytical and problem-solving skills

Excellent written and verbal communication

Ability to translate technical risks into business terms

Detail-oriented with strong documentation skills