Sr Manager, Technology Risk Management (PL)
Your Opportunity
Your opportunity
At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.
We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).
The Sr Manager, Technology Risk Management (PL) leads the Technology Information Security Officers (TISO) program and team, formerly known as Risk Champions, within STS Risk Services. This first-line people leader is accountable for informing and consulting STS senior leadership on enterprise programs supported by STS Standards and driving consistent execution against Technology and Cybersecurity risk frameworks.
The role directs a team of vertically aligned TISOs who help STS leaders understand applicable program requirements, identify teams and activities in scope, assess performance against required practices, and prioritize actions to address gaps. The leader establishes consistent program guidance, quality expectations, reporting, and escalation routines that provide visibility into participation, adherence, execution delays, and remediation progress. The role owns the TISO operating model and team delivery while maintaining clear accountability with enterprise program owners for program requirements and with technology and control owners for implementation and remediation.
Position Responsibilities:
Lead the TISO program and team: Manage the transition from Risk Champions to TISOs and define team responsibilities, coverage, engagement practices, and service expectations to support consistent first-line risk management across STS.
Develop team capability: Lead, coach, and develop risk professionals; establish objectives, delegate accountability, manage performance and capacity, and build the skills needed to deliver effective risk consultation.
Advise senior leadership: Consult STS Managing Directors and Directors on enterprise programs and STS Standards, translating Technology and Cybersecurity risk requirements into clear business obligations, priorities, risks, and recommended actions.
- Establish program coverage: Partner with enterprise program and standards owners to define which STS teams, technologies, processes, and activities are in scope, including required practices, accountable owners, deliverables, and timelines.
- Drive consistent execution: Direct TISO coordination with technology and control owners to communicate requirements, clarify expectations, monitor commitments, and resolve execution barriers while maintaining appropriate ownership of controls and remediation.
Oversee reporting and escalation: Deliver executive-ready reporting on participation, completion, risk and control indicators, gaps, and management commitments. Escalate missed milestones, deteriorating indicators, unresolved ownership, and capacity or dependency constraints with clear risks and decisions needed.
Monitor corrective actions: Partner with accountable owners to establish response plans, track remediation, and escalate overdue or insufficient actions through established issue management and governance processes.
Maintain governance and quality: Own TISO procedures, practice guidance, templates, quality standards, and governance routines to promote accurate, timely, consistent, and evidence-supported execution.
Coordinate risk and control activities: Guide TISO support for RCSA, risk and control blueprints, control procedure inventories, issue management, audits, regulatory examinations, and control validation while coordinating across responsible functions to minimize duplication.
Identify enterprise risk themes: Synthesize emerging risks, recurring control weaknesses, performance trends, and execution barriers across STS organizations to inform leadership prioritization and targeted improvements.
What you have
Required Qualifications:
- 8+ years of experience in technology risk management, cybersecurity, audit, oversight, SOX testing, or a related technology risk function.
- Demonstrated people leadership experience, including coaching, performance management, delegation, workload prioritization, and development of risk professionals.
- Experience managing a risk program or team operating model, including procedures, governance routines, quality assurance, stakeholder engagement, and continuous improvement.
- Strong knowledge of technology and cybersecurity risks, control design and evaluation, and frameworks such as NIST, ISO, and COBIT.
- Ability to translate enterprise programs, standards, and risk framework requirements into clear applicability, ownership, execution expectations, and management actions.
- Experience advising senior leaders and communicating complex risk matters through concise written assessments, executive presentations, and actionable recommendations.
- Demonstrated ability to influence and negotiate across technology, business, cybersecurity, enterprise program, and oversight functions, including the first and second lines of defense.
- Experience developing or overseeing risk metrics, scorecards, and executive dashboards that communicate program scope, adherence, control performance, execution gaps, and remediation progress.
- Strong analytical and technical problem-solving skills, including the ability to investigate complex issues, identify root causes, evaluate alternatives, and recommend practical solutions.
- Experience supporting RCSA, risk and control blueprints, control procedure governance, issue management, audits, regulatory examinations, or control validation.
- Ability to work independently within delegated authority, manage competing priorities, lead cross-functional working groups, and escalate matters requiring senior leadership decisions.
- Bachelor's degree in computer science or related discipline, or commensurate industry experience.
- Industry certifications such as CISSP, CISM, CISA, or CRISC are a plus.
In addition to the salary range, this role is also eligible for bonus or incentive opportunities.
What’s in it for you
At Schwab, you’re empowered to shape your future. We champion your growth through meaningful work, continuous learning, and a culture of trust and collaboration—so you can build the skills to make a lasting impact. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.
We offer a competitive benefits package that takes care of the whole you – both today and in the future:
- 401(k) with company match and Employee stock purchase plan
- Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
- Paid parental leave and family building benefits
- Tuition reimbursement
- Health, dental, and vision insurance
What you are good at
What you have
Required Qualifications:
- 8+ years of experience in technology risk management, cybersecurity, audit, oversight, SOX testing, or a related technology risk function.
- Demonstrated people leadership experience, including coaching, performance management, delegation, workload prioritization, and development of risk professionals.
- Experience managing a risk program or team operating model, including procedures, governance routines, quality assurance, stakeholder engagement, and continuous improvement.
- Strong knowledge of technology and cybersecurity risks, control design and evaluation, and frameworks such as NIST, ISO, and COBIT.
- Ability to translate enterprise programs, standards, and risk framework requirements into clear applicability, ownership, execution expectations, and management actions.
- Experience advising senior leaders and communicating complex risk matters through concise written assessments, executive presentations, and actionable recommendations.
- Demonstrated ability to influence and negotiate across technology, business, cybersecurity, enterprise program, and oversight functions, including the first and second lines of defense.
- Experience developing or overseeing risk metrics, scorecards, and executive dashboards that communicate program scope, adherence, control performance, execution gaps, and remediation progress.
- Strong analytical and technical problem-solving skills, including the ability to investigate complex issues, identify root causes, evaluate alternatives, and recommend practical solutions.
- Experience supporting RCSA, risk and control blueprints, control procedure governance, issue management, audits, regulatory examinations, or control validation.
- Ability to work independently within delegated authority, manage competing priorities, lead cross-functional working groups, and escalate matters requiring senior leadership decisions.
- Bachelor's degree in computer science or related discipline, or commensurate industry experience.
- Industry certifications such as CISSP, CISM, CISA, or CRISC are a plus.
In addition to the salary range, this role is also eligible for bonus or incentive opportunities.
Why Schwab?
At Schwab, “Own Your Tomorrow” embodies everything we do! We are committed to helping our employees unleash their potential and achieve their dreams. Our employees get to play a central role in disrupting a multi-trillion-dollar industry, creating a better, more modern way to build and manage wealth. We’re a modern financial services firm that stands apart from the industry, where you can go as far as your ambition takes you.
Hear from employees: What’s it like to work at Schwab!
The benefits of working at Schwab : a package designed to empower your health, wealth, career and life. Schwab is committed to building a diverse and inclusive workplace where everyone feels valued.
As an equal employment opportunity employer, our policy is to provide equal employment opportunities to all employees and applicants without regard to any status that is protected by law. (Please click here to see policy.)
Schwab is also an affirmative action employer, focused on advancing women, minorities, veterans, and individuals with disabilities in the workplace. We believe diversity and inclusion are part of our success as a company and our purpose of serving every client with passion and integrity.