Technology & Cybersecurity Risk Management Analyst

About TTS-US: Founded in 2011, Toyota Tsusho Systems US, Inc. (TTS-US) is a Toyota group company that develops IT, cybersecurity, and technology solutions to support Toyota’s global business operations. With eight TTS affiliates worldwide, TTS-US is helping establish a secure and resilient Toyota global value chain while continuing to expand its capabilities across cybersecurity, IT consulting, project support, and enterprise solutions.

The Technology & Cybersecurity Risk Management (T&CRM) Engineer supports the T&CRM program by analyzing technology and cybersecurity risks, conducting risk assessments, leading risk-related initiatives, and enhancing risk management processes. This role helps identify, visualize, and reduce technology and cybersecurity risks while guiding stakeholders through risk-based decision-making.

Core Responsibilities

• Conduct risk intake, assessments, triage sessions, and stakeholder risk discussions.

• Assess technology and cybersecurity risks using NIST, COBIT, and ISO frameworks.

• Identify, document, and evaluate inherent, residual, and emerging technology risks.

• Review controls and evaluate their effectiveness in mitigating identified risks.

• Map risks to controls and applicable framework and policy requirements.

• Facilitate control walkthroughs and risk discussions with control owners and stakeholders.

• Document risk statements, controls, evidence, and assessme