DevSecOps Service Owner

Toyota is a global automotive manufacturer. Toyota Motor Europes Digital Hub in Wroc2aw, established in 2026, develops and maintains software and connected digital services for Toyota and Lexus brands in Europe.

• Bachelors degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent experience).
• Experience in DevOps, DevSecOps, Platform Engineering, or Application Security roles.
• Strong hands-on experience with CI/CD pipelines and modern SDLC practices.
• Experience implementing security tooling: SAST, DAST, SCA, container & artifact scanning, secrets management, pipeline security controls.
• Experience with cloud platforms (e.g., AWS, Azure, or GCP).
• Strong understanding of Agile, DevOps, and secure-by-design principles.
• Experience with incident and service management practices.

Nice to have:

• Experience with enterprise toolchains (e.g., Jira, GitHub, GitHub Actions, ServiceNow).
• Familiarity with DORA metrics and developer productivity frameworks.
• Experience in regulated environments.
• Knowledge of policy-as-code tools (e.g., OPA, Sentinel).
• Security or cloud certifications (e.g., CISSP, CCSP, AWS Security).
• Experience leading platform or shared services teams.

• Own the end-to-end DevSecOps service lifecycle (design, build, run, improve).
• Define and maintain the DevSecOps service roadmap aligned with business and security priorities.
• Establish service standards, guardrails, and reference architectures.
• Embed security controls into CI/CD pipelines and developer workflows (SAST, DAST, SCA, secrets scanning, container security).
• Ensure high availability, performance, and resilience of DevSecOps tooling and pipelines; define SLAs/SLOs and monitor service health.
• Lead incident management and root cause analysis; manage upgrades, capacity planning, and technical debt.
• Ensure processes meet internal security policies and external regulatory requirements; support audit readiness.
• Drive pipeline standardization, policy-as-code and infrastructure-as-code, and continuous improvement of lead time and deployment frequency.
• Act as primary service owner and escalation point; manage demand, intake and prioritization; provide service reporting to leadership.
• Manage platform budget, optimise licensing and tooling costs, and own vendor relationships.

Please be informed that the data controller is TOYOTA MOTOR EUROPE NV/SA, ODDZIA2 W POLSCE (hereinafter "controller"). You have rights regarding your personal data according to applicable laws. Provision of mandatory data is required for the recruitment process. Consent to the processing of personal data can be withdrawn at any time. The recipient of the data includes Just Join IT service and other entities involved in recruitment.