Cloud Security Advisor

The Cybersecurity team is a strategic function within Toyota Motor Europe's IT & Digital division, supporting the transformation of Toyota’s European IT operations. The team focuses on resilient cloud security, cyber risk management in modern enterprise environments, and enabling secure innovation across digital platforms and services. The role supports Toyota’s long-term ambitions at the intersection of technology, risk, and business enablement.

• Relevant experience in Cloud Security, Infrastructure Security, DevSecOps, or related areas.
• Experience working in large or complex environments with a broad range of stakeholders.
• Experience advising on secure cloud adoption, architecture, or operational security across enterprise platforms.
• Good understanding of cloud security risks, controls, and remediation techniques across major cloud platforms.
• Experience with cloud security tooling, logging and monitoring, IAM, encryption, and secure networking concepts.
• Ability to help integrate and scale security controls within CI/CD and automation pipelines.
• Practical knowledge of compliance and control frameworks such as ISO 27001, NIST CSF, CIS Benchmarks, GDPR, or NIS2.
• Ability to explain complex technical concepts clearly to diverse audiences.
• Ability to build strong working relationships and influence stakeholders.
• Collaborative mindset with interest in coaching, mentoring, and continuous learning.

Nice to have:

• Familiarity with multi-cloud environments such as AWS, Azure, or Oracle Cloud.
• Knowledge of container, Kubernetes, and cloud-native security practices.
• Certifications like Certified Cloud Security Professional (CCSP), CISSP, AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, and CompTIA Security+.

• Develop and evolve cloud security policies, standards, and secure architecture practices aligned with recognised frameworks and business needs.
• Provide trusted security advice on cloud design, including identity, access, encryption, networking, platform hardening, and resilience.
• Perform cloud risk assessments, vulnerability reviews, and compliance gap analysis with practical mitigation strategies.
• Support teams in identifying, prioritising, and remediating cloud security weaknesses effectively.
• Act as a trusted partner for infrastructure, platform, and project teams to embed secure-by-design thinking into delivery.
• Translate complex technical risks into clear, actionable guidance for technical and non-technical stakeholders.
• Contribute to cloud security monitoring, incident response preparedness, and investigation support.
• Help strengthen DevSecOps practices by integrating security controls into automation and CI/CD pipelines.
• Collaborate across security and engineering teams to share best practices and improve cloud security maturity.
• Provide regular reporting and insight on cloud security posture, key risks, and improvement opportunities.