About TTS-US:
Founded in 2011, Toyota Tsusho Systems US, Inc. (TTS-US) is a Toyota group company, that develops IT solutions wherever global businesses operate. Transforming into a technology and mobility company, TTS-US with it's 8 TTS affiliates worldwide is establishing a secure and resilient Toyota global value chain. The creative capacity to forge such limitless business opportunities is one of the strengths of Toyota Tsusho Systems.
The Product Cybersecurity Engineer supports the Product Cybersecurity Integrity team in confirming that Toyota Motor North America out-vehicle products and services meet CSMS expectations. The engineer performs defined technical reviews, coordinates work across multiple stakeholders, and improves how the team plans, tracks, and reports compliance activities. This early-career role combines technical curiosity and critical thinking with disciplined project execution. The engineer will learn to evaluate cloud, web, mobile, API, and connected service architectures; use AI and automation responsibly to improve efficiency and consistency; and communicate clear findings for senior review. Final compliance decisions and material interpretation issues remain with experienced PCI personnel while the engineer develops independent assessment capability.
Essential Functions:
Out-Vehicle Technical Assessment
o Support CSMS gate assessments for out-vehicle products and services.
o Review system architecture, data flow, interface, and change information to identify security-relevant components, dependencies, and missing information.
o Draft assessment observations, questions, and findings for senior review, and track responses and corrective actions to closure.
o Coordinate with CSMS auditors so technical assessments supplement compliance audits without duplicating audit activities.
o Apply ISO/SAE 21434 and UN R155 concepts to out-vehicle assessment work while building deeper subject matter expertise through structured mentoring.
Project Planning and Management
o Build and maintain project plans that define scope, activities, owners, milestones, dependencies, deliverables, and completion dates.
o Coordinate assessment schedules with product teams, auditors, and other stakeholders.
o Track progress, decisions, risks, issues, and actions; escalate concerns early with clear impact and recommended next steps.
o Prepare concise status updates and maintain accurate records that support program-level reporting.
o Manage multiple assignments with attention to priorities, deadlines, and follow-through.
Compliance Data Automation and AI
o Use approved AI tools to accelerate research, document analysis, evidence triage, drafting, and recurring compliance work while validating outputs before use.
o Identify repeatable tasks that can be simplified or automated and develop practical solutions using Python, SQL, APIs, Power BI, Power Query, Power Automate, or comparable tools.
o Develop automated data quality checks and reporting that identify missing, inconsistent, or overdue information.
o Handle confidential and proprietary information in accordance with applicable data protection and AI use requirements.
Governance and Standards Support
o Maintain assigned portions of standards, policy, procedure, control, and evidence mappings.
o Support updates to assessment procedures, templates, guidance, and training materials based on lessons learned.
o Research relevant cybersecurity practices and emerging issues and summarize their potential impact for senior review.
Role Scope
o Approximately 50%: Out-vehicle technical assurance, including architecture and evidence review, gate assessments, findings, and follow-up.
o Approximately 30%: Compliance data automation and AI, including traceability, reporting, quality checks, workflow automation, and responsible AI use.
o Approximately 15%: Project planning and execution, including plans, schedules, milestones, dependencies, risks, status, and stakeholder coordination.
o…