Sr. Manager, Technology Risk Management

Your Opportunity

At Schwab, you're empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

The Asset Lifecycle Risk Management team provides independent oversight of technology risk and cyber resilience across Schwab's technology portfolio. As a Senior Manager, Technology Risk Management, you will serve as a senior individual contributor responsible for overseeing risks associated with the full technology asset lifecycle, endpoint security and resilience, enterprise mobility management, and technology configuration. Your work will help ensure critical applications and services remain within the firm's risk appetite and are designed to protect operational continuity and client trust.

In this role, you will partner across Technology Operations, Data, Cybersecurity, Architecture, Site Reliability Engineering, Compliance, and Corporate Risk Management to identify emerging risks, evaluate controls, and strengthen resilience requirements within existing processes and technologies. You will use sound judgment to challenge risk decisions, advise stakeholders, and influence solutions that balance business priorities with effective risk management.

You will also translate complex risk information into clear reporting and recommendations for senior leaders and management committees. By developing meaningful metrics, monitoring program maturity, and identifying opportunities for continuous improvement, you will help the firm make informed decisions and strengthen its technology and cyber resilience capabilities as risks, regulations, and industry practices continue to evolve.

What you have

Required qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field
• 5+ years of experience in third-party risk management, information security risk management, audit, oversight, SOX testing, operational risk management, or a similar risk and control function
• Experience identifying, assessing, monitoring, and communicating technology or cybersecurity risks
• Experience negotiating information security terms and conditions and providing effective challenge on technology and cyber resilience risks
• Demonstrated ability to apply independent judgment, analytical thinking, and structured problem solving to complex risk decisions
• Ability to communicate complex technical and risk information clearly to senior leaders, technical teams, business partners, and risk management stakeholders
• Ability to manage multiple priorities independently while collaborating across functions in a fast-paced environment

Preferred qualifications

• CISM, CISSP, CRISC, CISA, or PMP certification
• Experience with technology asset lifecycle practices, including planning, acquisition, deployment, management, and retirement
• Knowledge of endpoint security, endpoint resilience, enterprise mobility management, and enterprise or service configuration
• Understanding of cybersecurity frameworks and assurance standards, including NIST, ISO 27001, and SOC 2
• Experience developing risk metrics, management reporting, and program maturity insights that support informed decision-making
• Experience providing risk oversight for technology platforms, critical applications, or operational resilience programs
• Experience developing or evaluating cyber recovery strategies within a large financial services organization
• Demonstrated success influencing stakeholders, building collaborative relationships, and strengthening risk and control processes without direct authority
• Ability to adapt to emerging threats, regulatory expectations, and changing business priorities while maintaining high standards for quality and execution

In addition to the salary range, this role is eligible for bonus or incentive opportunities.