DevSecOps Service Owner

Toyota is a global automotive manufacturer. The Digital Hub in Wrocław is Toyota Motor Europe's IT research and development centre, responsible for developing and maintaining software and connected digital services for Toyota and Lexus brands in Europe.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent experience).
• Experience in DevOps, DevSecOps, Platform Engineering, or Application Security roles.
• Strong hands-on experience with CI/CD pipelines and modern SDLC practices.
• Experience implementing security tooling: SAST, DAST, SCA, container & artifact scanning, secrets management, pipeline security controls.
• Experience with cloud platforms (AWS, Azure, or GCP).
• Strong understanding of Agile, DevOps, and secure-by-design principles.
• Experience with incident and service management practices.

Preferred Qualifications:

• Experience with enterprise toolchains (e.g., Jira, GitHub, GitHub Actions, ServiceNow).
• Familiarity with DORA metrics and developer productivity frameworks.
• Experience in regulated environments.
• Knowledge of policy-as-code tools (e.g., OPA, Sentinel).
• Security or cloud certifications (e.g., CISSP, CCSP, AWS Security).
• Experience leading platform or shared services teams.

• Own the end-to-end DevSecOps service lifecycle (design, build, run, improve).
• Define and maintain the DevSecOps service roadmap aligned with business and security priorities.
• Establish service standards, guardrails, and reference architectures.
• Embed security controls into CI/CD pipelines and developer workflows (SAST, DAST, SCA, secrets scanning, container security).
• Ensure high availability, performance, and resilience of DevSecOps tooling and pipelines; define SLAs/SLOs and monitor service health.
• Lead incident management and root cause analysis; manage upgrades, capacity planning, and technical debt.
• Ensure processes meet internal security policies and external regulatory requirements; support audit readiness.
• Drive pipeline standardization, policy-as-code and infrastructure-as-code, and continuous improvement of lead time and deployment frequency.
• Act as primary service owner and escalation point; manage demand, intake and prioritization; provide service reporting to leadership.
• Manage platform budget, optimise licensing and tooling costs, and own vendor relationships.

Please be informed that the data controller is TOYOTA MOTOR EUROPE NV/SA, ODDZIAŁ W POLSCE. Personal data will be processed for the purpose of recruitment. Provision of mandatory data is required by the Labour Code. Personal data will be processed until recruitment procedure completion and possibly longer for claims or future recruitment participation. Consent to data processing can be withdrawn at any time.