Data Security Advisor

Toyota is a strong, global brand and one of the world’s leading automotive manufacturers. Teams at Toyota Motor Europe and Toyota Motor Manufacturing Poland in Lower Silesia are all working together to deliver the best mobility solutions for users around the world. Our Digital Hub is Toyota Motor Europe’s IT research and development centre, established in 2026 in Wrocław. We are responsible for developing and maintaining software and connected digital services for the Toyota and Lexus brands in Europe. The Cybersecurity team is a strategic function within TME’s IT & Digital division, supporting the transformation of Toyota’s European IT operations. The team plays a critical role in building resilient security frameworks, managing cyber risks, and fostering a proactive security culture across digital assets and operations.

• Bachelor’s or Master’s degree in Computer Science, Information Security, Data Science, or a related field, or equivalent practical experience.
• Experience in data protection, security advisory, or risk management, ideally within complex enterprise environments.
• Strong understanding of data protection principles and controls, including encryption, access management, secure data architecture, and cloud security.
• Working knowledge of regulatory and security frameworks, including GDPR, ISO 27001, and NIST CSF.
• Strong analytical skills with the ability to assess complex risks and recommend practical, risk-based solutions.
• Strong communication skills, with the ability to explain technical topics clearly to a range of audiences.
• Ability to collaborate effectively across multidisciplinary teams and build trusted stakeholder relationships.
• Commitment to respectful, inclusive ways of working that value diverse perspectives and support psychological safety.
• Sound judgement and problem-solving skills, particularly in complex or high-pressure situations.
• Adaptable, curious, and committed to continuous learning and responsible data handling.
• Awareness of fairness, accessibility, and ethical considerations in security and data practices.

Nice to have:

• Relevant certifications such as CISSP or CISM.

• Assess current data protection practices, identify vulnerabilities, and recommend improvements aligned with organisational risk appetite and regulatory requirements.
• Define and support the implementation of practical, measurable data security policies, standards, and procedures across the organisation.
• Support the design and implementation of technical controls such as data encryption, data loss prevention, identity and access management, and secure data architectures across cloud and on-premises environments.
• Monitor data security risks and contribute to incident response activities by analysing root causes, advising on remediation actions, and helping strengthen controls to prevent recurrence.
• Translate complex technical risks into clear, business-relevant insights that support informed decision-making across a range of stakeholders.
• Collaborate across IT, legal, compliance, data, and business teams to embed security by design into projects and digital initiatives.
• Contribute to awareness, training, and knowledge-sharing activities that help colleagues understand their role in protecting data.
• Promote inclusive, accessible, and ethical data security practices by considering diverse user needs and supporting fair, responsible use of data and AI.