Your OpportunityAt Schwab, you're empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us "challenge the status quo" and transform the finance industry together.
We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).
The Sr Manager, Technology Risk Management (PL) leads the Technology Information Security Officers (TISO) program and team, formerly known as Risk Champions, within STS Risk Services. This first-line people leader is accountable for informing and consulting STS senior leadership on enterprise programs supported by STS Standards and driving consistent execution against Technology and Cybersecurity risk frameworks.
The role directs a team of vertically aligned TISOs who help STS leaders understand applicable program requirements, identify teams and activities in scope, assess performance against required practices, and prioritize actions to address gaps. The leader establishes consistent program guidance, quality expectations, reporting, and escalation routines that provide visibility into participation, adherence, execution delays, and remediation progress. The role owns the TISO operating model and team delivery while maintaining clear accountability with enterprise program owners for program requirements and with technology and control owners for implementation and remediation.
Position Responsibilities:- Lead the TISO program and team: Manage the transition from Risk Champions to TISOs and define team responsibilities, coverage, engagement practices, and service expectations to support consistent first-line risk management across STS.
- Develop team capability: Lead, coach, and develop risk professionals; establish objectives, delegate accountability, manage performance and capacity, and build the skills needed to deliver effective risk consultation.
- Advise senior leadership: Consult STS Managing Directors and Directors on enterprise programs and STS Standards, translating Technology and Cybersecurity risk requirements into clear business obligations, priorities, risks, and recommended actions.
- Establish program coverage: Partner with enterprise program and standards owners to define which STS teams, technologies, processes, and activities are in scope, including required practices, accountable owners, deliverables, and timelines.
- Drive consistent execution: Direct TISO coordination with technology and control owners to communicate requirements, clarify expectations, monitor commitments, and resolve execution barriers while maintaining appropriate ownership of controls and remediation.
- Oversee reporting and escalation: Deliver executive-ready reporting on participation, completion, risk and control indicators, gaps, and management commitments. Escalate missed milestones, deteriorating indicators, unresolved ownership, and capacity or dependency constraints with clear risks and decisions needed.
- Monitor corrective actions: Partner with accountable owners to establish response plans, track remediation, and escalate overdue or insufficient actions through established issue management and governance processes.
- Maintain governance and quality: Own TISO procedures, practice guidance, templates, quality standards, and governance routines to promote accurate, timely, consistent, and evidence-supported execution.
- Coordinate risk and control activities: Guide TISO support for RCSA, risk and control blueprints, control procedure inventories, issue management, audits, regulatory examinations, and control validation while coordinating across responsible functions to minimize duplication.
- Identify enterprise risk themes: Synthesize emerging risks, recurring control weaknesses, performance trends, and execution barriers across STS organizations to inform leadership prioritization and targeted improvements.
What you haveRequired Qualifications:- 8+ years of experience in technology risk management, cybersecurity, audit, oversight, SOX testing, or a related technology risk function.
- Demonstrated people leadership experience, including coaching, performance management, delegation, workload prioritization, and development of risk professionals.
- Experience managing a risk program or team operating model, including procedures, governance routines, quality assurance, stakeholder engagement, and continuous improvement.
- Strong knowledge of technology and cybersecurity risks, control design and evaluation, and frameworks such as NIST, ISO, and COBIT.
- Ability to translate enterprise programs, standards, and risk framework requirements into clear applicability, ownership, execution expectations, and management actions.
- Experience advising senior leaders and communicating complex risk matters through concise written assessments, executive presentations, and actionable recommendations.
- Demonstrated ability to influence and negotiate across technology, business, cybersecurity, enterprise program, and oversight functions, including the first and second lines of defense.
- Experience developing or overseeing risk metrics, scorecards, and executive dashboards that communicate program scope, adherence, control performance, execution gaps, and remediation progress.
- Strong analytical and technical problem-solving skills, including the ability to investigate complex issues, identify root causes, evaluate alternatives, and recommend practical solutions.
- Experience supporting RCSA, risk and control blueprints, control procedure governance, issue management, audits, regulatory examinations, or control validation.
- Ability to work independently within delegated authority, manage competing priorities, lead cross-functional working groups, and escalate matters requiring senior leadership decisions.
- Bachelor's degree in computer science or related discipline, or commensurate industry experience.
- Industry certifications such as CISSP, CISM, CISA, or CRISC are a plus.
In addition to the salary range, this role is also eligible for bonus or incentive opportunities.
