Principal AI Governance & Security Engineer (AI)

Location: Plano, Texas, United States. The role is onsite and requires existing authorization to work in the United States.

Company

Toyota Financial Services is Toyota and Lexus's finance and insurance business, developing customer-focused financial services and governed AI capabilities.

What you will do

• Design and maintain enterprise AI governance standards, policies, procedures, risk tiers, and lifecycle controls.
• Operationalize intake, risk classification, approval workflows, monitoring, remediation, and AI inventory management.
• Perform AI-specific threat modeling covering prompt injection, data poisoning, adversarial attacks, model theft, and data exfiltration.
• Design agent security controls including sandboxed execution, non-human identity, secrets management, least privilege, and mediated tool access.
• Build production-grade guardrail services, evaluation pipelines, agent and MCP registrations, and human-in-the-loop approval flows using AWS, Bedrock, AgentCore, Cedar, Lambda, and Step Functions.
• Lead design reviews, establish engineering standards, support incident response and red-team exercises, and mentor engineers.

Requirements

• 12+ years of software engineering experience with AI/ML or data governance and AI/ML information security.
• Experience implementing enterprise AI or data governance frameworks and operational processes in production.
• Ability to translate security, risk, privacy, and compliance requirements into executable controls, tests, and software.
• Working knowledge of SR 11-7, NIST AI RMF, the EU AI Act, and ISO/IEC 42001.
• Practical experience with AI security, threat modeling, guardrails, identity and access management, secrets, and least-privilege design.
• Must have the right to work in the United States without current or future Toyota immigration sponsorship.

Nice to have

• Experience governing or securing enterprise AI or GenAI programs in financial services or another regulated industry.
• Hands-on experience with AWS Bedrock, AgentCore, Bedrock Guardrails, Cedar, and LLM or agent evaluation frameworks.
• Certifications such as CISSP, CCSP, CRISC, CISA, an AI security or governance credential, or a model-risk certification.

Culture & Benefits

• Team-oriented, flexible, and respectful work environment.
• Professional development programs and tuition reimbursement.
• Comprehensive health care and wellness plans, paid holidays, and paid time off.
• 401(k) plan with company matching and an annual retirement contribution, where applicable.
• Vehicle purchase and lease programs, tax-advantaged accounts, family support services, and relocation assistance where applicable.