About Toyota Financial ServicesToyota Financial Services (TFS) provides retail, leasing and wholesale financial services to Toyota and Lexus dealerships and customers across Canada. TFS is a member of Toyota Financial Services Corporation (TFSC), a wholly owned subsidiary of Toyota Motor Corporation in Japan with the Canadian operation headquarters in Markham, Ontario.Job TitleInformation Security AnalystPosition SummaryThis role will provide security guidance to business and service partners, identify and prioritize security‑related requirements and facilitate delivery of information security services. The successful candidate will be responsible for protecting TFS information security assets by identifying, assessing, and mitigating security risks. This role supports security operations, vulnerability management, third‑party risk, and security governance activities while working closely with management to support and ensure compliance to prescribed risk‑mitigating policies and procedures. Acting as an Information Security ambassador to the business, this role determines security requirements by evaluating business initiatives and requirements, ensuring alignment to Toyota’s Global Information Security Standards. This role will be reporting to the Manager, Information Security.What You’ll Be DoingSecurity Monitoring & Incident ResponseMonitor and act on security alerts and advisories from the SOC team and other security toolsPerform triage, investigation, and escalation of security incidentsSupport incident response activitiesStay informed on emerging threats, vulnerabilities, and attack techniquesVulnerability & Access Risk ManagementReview vulnerability reports, assess exploitability of vulnerabilities, and coordinate remediation effortsSupport access governance processes, including access reviews, least privilege,



and segregation of dutiesInvestigate access anomalies and unauthorized access attemptsPerform risk assessments of information systems and infrastructure; then develop and communicate mitigation recommendations.Third-Party Risk, Governance & ComplianceConduct security risk assessments of vendors and service providers, including review of SOC2 reports and other security documentationTrack remediation of identified third‑party risksSupport internal and external auditsMaintain and update security policies, standards, and procedures, and security training materialsDevelop and maintain dashboards to track and report on key risks and compliance metricsPrepare documentation and reporting materials for managementSupport regular business continuity planning and disaster recovery initiativesIdentify and communicate current and emerging security threats to Senior ManagementBusiness Partnership & Security AwarenessCollaborate with business units, application teams, and service partners to define and guide security controls that manage risk.Support phishing simulations and annual security awareness campaigns.Work with internal teams and affiliates on IT projects and act as a liaison with Toyota’s Global Information Security Group (GISG).What You’ll Bring5+ years’ experience as an information security analyst, preferably in the Banking or Financial services industryPost‑secondary education in Computer Science/Engineering or related fieldExperience working with:Vulnerability management tools (e.G., Qualys)IAM tools (e.G., SailPoint, Okta)Endpoint security tools (e.G., CrowdStrike)Privilege Access Management tools (e.G., CyberArk)Understanding of:Network security concepts (firewalls, VPNs, segmentation,



zero trust)Cloud security fundamentals (Azure, AWS)Authentication methods (MFA, SSO)DLPSDLC processesAPI securityPreferred license or certification in one of the following: Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Information Systems Security Architecture Professional (ISSAP), AWS Certified Security Specialty and/or Certified Cloud Security Knowledge (CCSK)Strong analytical and problem‑solving skillsExcellent written and verbal communicationAbility to translate technical risks into business termsDetail‑oriented with strong documentation skillsAbility to manage multiple priorities in a fast‑paced environmentWhat We’ll BringA work environment built on teamwork, flexibility, and respect.Competitive compensation package including health and dental benefits and bonus.Health and dental benefits effective immediately.Company pension plan with matched contribution.Associate vehicle discount program.Professional growth and development programs to help advance your career, as well as tuition reimbursement.Fitness reimbursement.Outstanding company culture‑Respect for people and continuous improvement is at our core.Competitive time off benefits.A hybrid work environment.The anticipated annual base salary for this position is $82,000-$105,000. The offered salary will be based on the candidate’s experience, knowledge, skills and qualifications.What You Should KnowOur success begins and ends with our people. We embrace diverse perspectives and value unique human experiences. We are proud to be an equal opportunity employer that celebrates the diversity of the communities where we live and do business. Applicants for our positions are considered without regard to race, ethnicity, national origin, sex, sexual orientation, gender identity or expression, age, disability, religion, or any other characteristics protected by law.#J-18808-Ljbffr

📌 Cyber Defense Analyst - Hybrid (Vancouver) - $85,200 - $135,200 A Year (Winnipeg)
🏢 BC Financial Services Authority
📍 Winnipeg