Toyota Financial Services, KINTO and KINTO JOIN

Competitive salary, annual bonus, car allowance and an extensive benefits package. The role in a nutshell: Responsible for all aspects of Information Security within Toyota Financial Services UK, including compliance with Corporate Policies, the ongoing promotion of Information Security across the organisation and to operate an effective Information Security Management System (ISMS). About the 'Department': The Business Technology Solutions (BTS) department are responsible for delivering end-to-end business technology and change through their four key functions of Governance, Projects & Change, Delivery and Technical Operations. They look after both TFSUK and KINTO UK. The mission of BTS is to Give (the Business the technology, applications and services it needs), to Guide (the Business through Change using their expertise and experience) and to Guard (always protect the Business, its Customers & its Data). What you'll be doing: Maintain, mature and align the BTS' ISMS with ISO27001:2022 through management and evolution of the company's Information Security policies, maintaining best practice and alignment with Corporate and Regulatory requirements, including the Global Information Security Group framework (GISG), General Data Protection Regulation (GDPR), Sarbanes-Oxley (SOX) PCI-DSS & Cyber Essentials Plus. Manage Information Security aspects of the third-party due diligence process, including subject matter expertise to support onboarding of new suppliers, ongoing assessment of existing suppliers, contract reviews. Manage/Co-ordinate or provide reporting material for regular information security meetings including supplier security reviews, risk register reviews, metrics. Provide clear and actionable information security reporting to senior leadership. Manage/operate Information Security related tools such as GRC tool and Supplier assessment tool. Own and maintain the BTS Risk register, ensuring risks are identified, assessed and documented in accordance with internal risk methodology, including exception handling. Working in partnership with the Data Protection Officer (DPO) & Legal & Compliance to protect the organisation's information. Overseeing Audit Findings and any associated remediation across BTS including gathering, management and submission of control evidence to support assurance activities, internal compliance reviews (GISG) and any regulatory requirements Manage the Information Security Awareness programme, including maintenance of the training schedule, annual employee training, creation of materials and assist with co-ordination of monthly phishing campaigns. Proactively raising the profile of Information Security across the organisation, its stakeholders, vendors and customers. Working in partnership with the Business & BTS teams to ensure all Projects, Changes, policies and procedures are compliant with corporate information security policies. Management of the annual Security Incident Response Test (SIRT), as well as ensuring the remediation of any findings. Undertake Security related Testing, including Phishing, Security Incident Response Tests Co-ordinate response to security incidents and breaches to ensure any impact is contained and relevant information obtained to facilitate analysis and improvement plans. Maturing the Information Security mindset across TFS UK. What you'll get to own: Management of TFSUK's ISO27001 certification, ensuring the ongoing certification is retained Management of TFSUK's GISG posture, ensuring compliance against the extensive control set Management of the GISG Vendor Assessment process for Information Security assurance of all TFSUK vendors Development & Management of the Information Security Strategy and subsequent annual reviews Oversight of remediation work for all open IT audit findings Management of IT Risk Register and ongoing monthly reviews Information Security Reporting & Performance KPIs Key Experience & Skills: Proven experience in developing, implementing, maintaining and leading an effective ISMS and information security control assurance programme. Strong stakeholder management skills, including technical members of staff and senior executives, stakeholder negotiation and influencing. Good analytical skills. Strong understanding of ISO27001, GDPR, SOX & Information Security Risk Management Understanding of information security tools Experience with business continuity, third party risk management and incident management. Attributes & Behaviours: Strong written and verbal communication skills Ability to interact professionally with a broad range of technical and non-technical stakeholders across the business Keen problem solver and critical thinker Strong multi-tasker, able to work effectively on several projects at one time in a busy and time-driven work environment Proactive, determined and self-motivated At Toyota Financial Services (TFS) it is more than just an externally bench-marked salary and bonus, we also offer: Hybrid working pattern is 2 days in the office and 3 days from a location of your choice. Access to attractive car schemes for you (& your family) for Toyota & Lexus cars Excellent pension scheme (up to 6% employee contribution and 15% employer contribution). Generous annual leave of 25 days which increases with service and holiday purchase option Private Medical Healthcare (single, partner/spouse and dependent children) with Digital GP Service Group Income Protection cover with Aviva including physical, mental, and financial wellbeing services Employee Assistance Program Eye tests Onsite gym, Sports and Social Club, & flu jabs to keep you healthy Wellbeing hour each month and many more initiatives throughout the year to encourage a healthy mind and body, and to raise awareness and celebrate diversity, equity and inclusion. Dress for your day policy to make you feel comfortable at work Eco HQ, free parking & restaurant Two volunteering days per year Reward gateway voucher discounts Flexible working scheme and we welcome flexible working conversations at interview Regular 121s with your manager, a personal development review (PReview) each quarter A wide range of learning & development opportunities including Linked In Learning courses £250 contribution towards you learning something new outside of work Annual events (e.g., summer party, BBQ & Xmas party) including Countdown to Christmas events every December - it is so much fun! At Toyota Financial Services (TFS) we value everyone and are pleased to be recognised as a Disability Confident Employer.

Toyota Financial Services is seeking an Information Security Manager in Epsom, UK. This role is responsible for managing all aspects of Information Security, ensuring compliance with corporate policies, and maintaining an effective ISMS. Ideal candidates will have proven experience with ISMS, a strong understanding of ISO27001 and GDPR, as well as excellent stakeholder management skills. The position offers a competitive salary, annual bonus, and extensive benefits.

Toyota Financial Services, KINTO and KINTO JOIN is seeking an IT Network and Cyber Security Specialist in Epsom, UK, to provide operational support and management of IT security and network infrastructure. This role includes managing day-to-day cyber security tasks, developing security systems like firewalls and endpoint protection, and ensuring compliance with security policies. A strong background in cyber security tools and network infrastructure is essential. Benefits include hybrid working, generous leave, and excellent pension plans.

The role in a nutshell: To provide effective and timely operational support, development and management of the IT network and security infrastructure to meet business requirements and objectives. To complete projects on time, within scope and to budget. About the 'Department': They look after both TFSUK and KINTO UK. The mission of BTS is to Give (giving the business the technology, applications and services it needs), Guide (guiding the business through changes using expertise and experience) and Guard (always protect the business). What you'll be doing: Work closely with other members of the team to ensure the technology, security policies and procedures are in place to safeguard the business. Manage day to day operational cyber security tasks to maintain optimum business security. Develop, maintain, and support the organisations IT security systems including managing next generation firewalls, IPS, security SIEM tools, Endpoint and security devices or services, responding to security incidents and analysing security breaches. Develop, maintain, and support the organisations network including managing all Layer2/3 devices, LAN, WAN, Internet, B2B connections, RAS, NLB, Wi Fi ensuring they support the business goals and infrastructure. Responsible for identifying external and internal threats, including investigating and documenting security incidents, making recommendations for fixes, and implementing those fixes where applicable. Working on cyber security projects or those that require security input, including the rollout of new security measures across the business. Monitor SIEM tools and data feeds for threats and take appropriate action when required. Install and operate firewall and data encryption software to protect sensitive business information. Support the technical implementation of ongoing security requirements, including access control and technical audits. Ongoing assessment of risk and reporting to line manager allowing him to make informed decisions regarding cyber security. Analyse and identify potential threats to fine tune the existing security monitoring platforms. Create, maintain, and review security policies and controls across the business, in line with business needs. Manage, update, and resolve incidents or service requests, in adherence to all applicable Service Level Agreements. Research current and developing cyber security products and standards. Deploy patches to security devices in a timely manner and ensure any detected vulnerabilities are fixed to maintain high levels of security. Perform daily monitoring of security estate to ensure there is no unplanned downtime, breaches of security or network vulnerabilities. Create, maintain, and adhere to operational policies, procedures, and standards to effectively support the operational business. Create and maintain system documentation including documentation sufficient for someone else to cover in your absence. Participate in the development, testing and maintenance of disaster recovery and business continuity plans. Recommend, develop, and implement system solutions through analysis of business requirements and new developments in technology. Effectively manage small works requests in line with defined procedures. Liaise with 3rd party company representatives to ensure that satisfactory support, supply, and maintenance services are provided. Provide specialised technical assistance in the planning and development of new projects and systems. Ensure that IT equipment inventory information is entered and maintained. How you could stretch this role: Demonstrate a flexible approach to working hours and travel, and work closely with other members of IT, to meet with support and project deadlines. Participate in IT Strategy reviews as required. Suggest improvements to the department's processes and procedures (where appropriate), encouraging a work culture of continuous improvement. Involvement in ad hoc projects. Support, coach and assist other team members and advise on new preventative measures and fixes. Communicate with other teams to resolve escalated issues quickly and efficiently. Identify any potential problem areas and devise methods of prevention. Ensure housekeeping and maintenance routines are executed when required. Key Experience & Skills: Essential Experience: Palo Alto Firewalls and all associated NG services. Endpoint detection and remediation. Proven track record in Cyber security and understanding of cyber security analysis, tools and software. Experience of implementing, supporting and developing L2/3 network infrastructure. Qualys Vulnerability Management. Aruba Wifi. L2/3 switching - Cisco Nexus. Network Load balancing. Penetration Testing (3rd Party). Incident management. Data Security. Attributes & Behaviours: Good time management and organisational skills. Strong written and verbal communication, including confidence in presenting. Self motivated and proactive worker. Keen attention to detail. Able to work effectively with all levels of staff and external partners. Professional attitude and motivation by producing quality results. Methodical and structured approach to work. Benefits: Hybrid working pattern: 2 days in the office and 3 days from a location of your choice. Access to attractive car schemes for you (and your family) for Toyota & Lexus cars. Excellent pension scheme (up to 6% employee contribution and 15% employer contribution). Generous annual leave of 25 days which increases with service and holiday purchase option. Private Medical Healthcare (single, partner/spouse and dependent children) with Digital GP Service. Group Income Protection cover with Aviva including physical, mental, and financial wellbeing services. Employee Assistance Program. Eye tests. Onsite gym, sports and social club, & flu jabs to keep you healthy. Wellbeing hour each month and many more initiatives throughout the year to encourage a healthy mind and body, and to raise awareness and celebrate diversity, equity and inclusion. Dress for your day policy to make you feel comfortable at work. Eco HQ, free parking & restaurant. Two volunteering days per year. Reward gateway voucher discounts. Flexible working scheme and we welcome flexible working conversations at interview. Regular 1:1s with your manager, a personal development review each quarter. A wide range of learning & development opportunities including Linked In Learning courses. £250 contribution towards learning something new outside of work. Annual events (e.g., summer party, BBQ & Xmas party) including Countdown to Christmas events every December - it is so much fun! Equal Opportunity Employment We are a Disability Confident Employer and are committed to supporting disabled applicants throughout the recruitment process.