Senior Manager / Director, Information Security

TEAM

Woven by Toyota aims to realize a new social infrastructure that integrates Software-Defined Vehicles, mobility services, and smart cities. To achieve this vision, it is essential to comprehensively ensure Safety, Security, and Quality across all products and services.
As a member of Woven by Toyota’s Global Safety & Quality (S&Q) Team, this position plays a critical role in ensuring that our products and services meet global safety and reliability standards, with a focus on cybersecurity and information security.
The Global Safety & Quality team is responsible for ensuring that the products and services provided by all Lines of Business (LoB) within Woven by Toyota comply with safety, security, and quality requirements based on national regulations, international standards, and the Toyota Group’s internal policies.
In this position, you will act as the Second Line of Defense from an independent standpoint, providing governance regarding cybersecurity and information security, and ensuring that industry best practices, regulations, and international standards are appropriately incorporated into the development and operational processes of Woven by Toyota’s products and services.
The successful candidate will work closely with engineering, product, and platform teams across each Line of Business (LoB) to support the delivery of safe, high-quality, and secure products and services.
This position provides information security and cybersecurity governance across Woven by Toyota’s diverse business domains.
The scope includes the following:
Vehicle Cybersecurity
・Vehicle Cybersecurity (In-Vehicle / Out-Vehicle CSMS)
・Connected Vehicles and Mobility Services
Digital Platforms
・Software Development Platforms
・Development Tools and Digital Services
Smart City Infrastructure
・Smart City (Woven City) Infrastructure
・IoT and Urban Infrastructure
Enterprise Security
・Enterprise IT
・Cloud Infrastructure
・Corporate Information Security
In these areas, you will drive security risk management, ensure regulatory compliance, and strengthen security governance.

RESPONSIBILITIES

This position supports security and quality assurance for Woven by Toyota through the following activities:
・Establishing cybersecurity and information security governance
・Security risk assessment and management
・Implementation of security standards and best practices
・Providing security advisory services to Line of Business (LoB) teams
・Addressing security regulations and compliance requirements
・Promoting Security by Design
・Fostering a security-conscious culture
This role will have the following significant impact on the Woven by Toyota business:
・Integrated assurance of safety, security, and quality in products and services
・Establishing integrated security governance across vehicles, urban infrastructure, and enterprise IT
・Compliance with global regulations and international standards
・Reducing cyber risk and enhancing organizational resilience
Additionally, this role ensures that our digital services and enterprise environments maintain a high international standard of defense capabilities against external cyberattacks.
Woven by Toyota is advancing the construction of a new mobility ecosystem that transcends the boundaries of the traditional automotive industry, encompassing Software-Defined Vehicles, connected mobility, and smart cities.
Therefore, this position is a strategic role responsible for realizing security governance that transcends the boundaries of Vehicle, Infrastructure, and Enterprise.
In the rapidly evolving environment of mobility and digital services, you will play a central role in comprehensively ensuring Safety × Security × Quality.

MINIMUM QUALIFICATIONS

For this position, candidates must hold a bachelor’s or master’s degree in electrical, electronic, or information engineering, along with a thorough understanding of the following standards and frameworks, and at least 10 years of relevant professional experience, ideally in companies with a robust three-line defense structure.

Information Security
・ISO/IEC 27001 / 27002
・ISO/IEC 27005

Infrastructure / IoT Security
・IEC 62443
・ISO/IEC 27400

Risk Management
・ISO 31000

NICE TO HAVES

As a Senior Manager of Information Security at a mobility company, we welcome candidates with experience and knowledge of the following standards and frameworks to comprehensively ensure safety, quality, and security:
・ISO/SAE 21434
・UNECE UN-R155 (Cybersecurity Management System)
・UNECE UN-R156 (Software Update Management)
・ISO 26262 (Functional Safety)
・ISO 21448 (SOTIF)
・Automotive SPICE
・ISO/IEC 27701 (Privacy)
・ISO 9001 (Quality Management System)
・ISO/IEC 23894 (AI Risk Management)
・Business-level proficiency in Japanese (equivalent to JLPT N1) and business-level proficiency in English