Senior IT Security Engineer

SUMMARY The Senior IT Security Engineer is responsible for developing and executing our cyber security risk management and incident response programs. In addition to our internal operations, the scope of these programs include our many vendors and business partners. Strong interpersonal skills are a priority in this role as the Senior IT Security Engineer will serve as a liaison between our corporate cyber security team, Gulf States Toyota business leadership, Toyota Motors North America, and the 150+ Toyota dealers in our five state region. RESPONSIBILITIES * Develop and manage an incident response program for security threats impacting our business operations * Draft and maintain our incident response policies and procedures * Facilitate the response process for active incidents and act as the liaison for key stakeholders * Develop a framework for evaluating the security risk of vendors and business partners * Conduct third party security assessments and inform the business on risks * Monitor threat and vulnerability data sources for emergent risks * Implement a cyber security training program to educate our associates and business partners on security best practices * Work closely with Legal in support of contracts, regulations and compliance objectives * Collaborate with our enterprise IT security team * Communicate complex concepts clearly, concisely, and in a way that non-security practitioners will understand * Assist with security awareness initiatives * Perform other job related functions as assigned * Share knowledge openly with peers * Other duties as assigned. * Responsibly receive, transmit, and handle consumer and customer data per applicable policies and procedures. * Review and follow data privacy practices, policies, and guidelines. SUPERVISORY RESPONSIBILITIES Does not manage people but may lead projects. QUALIFICATIONS Education and Experience requirements: * Bachelor''s degree in Computer Science, Computer Engineering, Information Security, Information Technology and 5 - 8 years related experience and/or training; or equivalent combination of education and experience * Experience assessing supply chain security including vendors and business partners Soft Skills * Works with minimal supervision and self-driven * Manages complexity in order to effectively find solutions and solves problems * Highly organized; able to organize and assimilate large quantities of complex information. * Drives results by consistently achieving completion and closure of tasks, even the face of obstacles and setbacks. * Effectively communicates complex ideas in a clear and concise manner both verbally and in writing. * Adaptive personality and ability to function in a fast-paced environment * A problem solving attitude that can adapt to varying timelines * A strong attention to detail combined with the ability to prioritize tasks * Excellent ability to multi-task assigned duties or projects. * Strong interpersonal skills; promoting healthy relationships and team dynamics * Strong capability to plan and align work with regards to sense of urgency and priority. * Strong capability to provide Business Insight * Strong ability to influence organization stakeholders Technical Experience * 5 year''s work experience in risk management and incident response * Experience with third party security reviews and risks associated with third party access and data sharing * Understanding of security management practices and associated frameworks like NIST, ISO 27001 and CIS 18 Controls. * Experience developing training materials and writing technology specific best practices To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. CERTIFICATES, LICENSES, REGISTRATIONS* * CISSP desired PHYSICAL REQUIREMENTS: The physical requirements described here are representative of those that must be met by an associate to successfully perform the essential functions of the job. While performing the duties of the job, the associate is required on a daily basis to analyze and interpret data, communicate, and remain in a stationary position for a significant amount of the work day; and frequently access, input, and retrieve information from the computer and other office productivity devices. The associate is regularly required to move about the office and around the corporate campus. The associate is occasionally required to travel to other sites, including out-of-state, where applicable, for business. The associate must frequently move up to 10 pounds and occasionally move up to 25 pounds. WORK ENVIRONMENT: The work environment characteristics described here are representative of those an associate encounters while performing the essential functions of this job. While the job is generally performed in an office environment, the associate is occasionally exposed to wet and/or humid conditions, areas in which moving mechanical parts, fumes, toxic or caustic chemicals are present, and outside weather conditions. The noise level in the office environment is typically quiet, but the associate may be occasionally exposed to loud noise levels. Minimal travel is required for this position (up to 20% of the time and on a domestic basis). *Legally authorized to work in the United States, without Sponsorship. LI-HM1 HP125Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled

Created: 2025-11-15