Cyber Security Program Manager

Overview Who we are Collaborative. Respectful. A place to dream and do. These are just a few words that describe what life is like at Toyota. As one of the world’s most admired brands, Toyota is growing and leading the future of mobility through innovative, high-quality solutions designed to enhance lives and delight those we serve. We’re looking for talented team members who want to Dream. Do. Grow. with us. An important part of the Toyota family is Toyota Financial Services (TFS), the finance and insurance brand for Toyota and Lexus in North America. While TFS is a separate business entity, it is an essential part of this world-changing company- delivering on Toyota's vision to move people beyond what's possible. At TFS, you will help create best-in-class customer experience in an innovative, collaborative environment. Toyota does not offer support or sponsorship of job applicants for employment-based visas or any other work authorization for this role now or in the future. You must have the right to work in the United States and not require Toyota support or sponsorship for immigration-related employment (e.g., H-1B, O-1, E-3, H-1B1, TN, F-1 OPT, F-1 STEM OPT, F-1 CPT, TN, ‘job flexibility benefits’ (also known as I-140 or Adjustment of Status portability), etc. now or in the future. You should not apply for this role if you will require Toyota to assist with immigration support or sponsorship now or in the future. Who we’re looking for Toyota’s Cyber Security Department is looking for a passionate and highly motivated Cyber Security Program Manager. As the Cyber Security Program Manager, Cyber Security, you will serve as a strategic leader accountable for both the hands-on delivery of complex cybersecurity initiatives and the enterprise-level orchestration of multiple interrelated programs. This role is responsible for ensuring cybersecurity efforts are aligned to business strategy, risk priorities, compliance obligations, and long-term technology roadmaps. You will lead cross-functional planning and execution across security engineering, architecture, infrastructure, risk, compliance, release management, vendors, procurement, and business stakeholders. In addition to owning day-to-day delivery execution, you will establish governance, drive prioritization, remove barriers, and influence decisions that impact the cybersecurity portfolio across the enterprise. This role requires deep program management capability, strong cybersecurity domain knowledge, excellent stakeholder leadership, and the ability to operate with a high degree of autonomy across complex and ambiguous environments. You are expected to balance tactical execution with strategic leadership, ensuring both immediate delivery commitments and long-term program outcomes are achieved. What you’ll be doing These are accountabilities you are solely responsible for and will execute daily/weekly: Project and Program Delivery Execution: Lead the full delivery lifecycle for complex cybersecurity initiatives, including planning, execution, dependency management, milestone tracking, and delivery oversight across multiple workstreams. Ensure committed objectives, timelines, and quality standards are met. Agile Cadence and Delivery Management: Drive the daily project cadence, including stand-ups, sprint planning, backlog refinement, sprint reviews, and retrospectives. Ensure work is prioritized appropriately, delivery progress is transparent, and impediments are escalated and resolved quickly. Risk, Issue, and Dependency Management: Proactively identify, document, assess, and manage risks, issues, assumptions, and dependencies using structured frameworks such as RAID logs. Anticipate bottlenecks, implement corrective actions, and maintain delivery momentum across competing priorities. Budget and Financial Management: Own and manage project and program budgets across all cost categories, including labor, technology, professional services, and vendor spend. Monitor actuals versus forecast, identify variances, and take corrective action to maintain financial alignment. Executive and Stakeholder Reporting: Provide clear, timely reporting to executive, management, and team-level stakeholders on scope, schedule, budget, quality, risks, and decisions. Maintain dashboards, scorecards, and program communications that support informed decision-making. Release, Change, and Deployment Coordination: Partner with Release Management and other delivery teams to ensure cybersecurity deliverables move through release and change governance processes successfully. Confirm readiness, manage dependencies, and ensure all artifacts and approvals are aligned with enterprise controls. Compliance and Governance Oversight: Ensure cybersecurity initiatives are delivered in alignment with applicable regulations, standards, and internal policies such as NIST, GDPR, HIPAA, PCI-DSS, and enterprise control requirements. Partner with GRC, compliance, and risk teams to embed security obligations into execution. Vendor and Procurement Management: Manage third-party vendors and service providers to ensure contracted work is delivered on time, within scope, and to quality expectations. Support vendor selection, SOW development, milestone tracking, and performance reviews. Intake Prioritization and Portfolio Coordination: Own the cybersecurity intake process by triaging, categorizing, and prioritizing incoming requests. Ensuring work is aligned to business objectives, strategically sequenced, and appropriately resourced. Shared Responsibilities These are areas where you actively participate and drive execution in partnership with other teams or leadership: Strategic Roadmap Alignment: Partner with leaders across cybersecurity, technology, and business functions to maintain and evolve the cybersecurity product and project roadmap in alignment with enterprise priorities. Cross-Functional Program Leadership: Lead multiple interde