Vendor Risk and Controls Manager

Your Opportunity

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

Corporate Vendor Management at Charles Schwab & Co. is responsible for implementing a firm-wide, end-to-end vendor management process to maximize vendor performance and value. Corporate Vendor Management is responsible for the sourcing, onboarding, risk assessment, monitoring and offboarding of third-parties; and assists Schwab in meeting regulatory and compliance requirements.

As a Manager on the Risk and Controls team in Corporate Vendor Management (CVM), you are responsible for the leading and enhancing CVM’s oversight of third-party vendors. In this role, you will follow a risk-based approach in executing a comprehensive third-party risk management framework, ensuring compliance with regulatory requirements, and mitigating potential risks related to vendor services in order to support business partners across the firm in the accurate, efficient, and complete assessment of their third-party vendors. The ideal candidate will have a strong background in risk management, vendor governance, and compliance within a highly regulated industry.

What you’ll do:

• Execute a robust third-party risk management framework to assess, monitor, and mitigate vendor risks through risk assessment and oversight activities
• Consistently follow risk assessment methodologies to evaluate third-party vendors based on criticality, compliance, cybersecurity, operational resilience, and financial stability
• Drive completion of risk assessments and identify obstacles to contracting or continued relationships with third parties
• Ensure risk assessment reviews are thorough and confirm completion of due diligence prior to agreement signature
• Ensure that all activities and efforts are consistent with Schwab policies and guidelines and in alignment with regulatory guidance
• Ensure third-party risk management practices comply with industry regulations, internal policies, and best practices
• Stay updated on evolving regulatory landscapes affecting third-party risk and recommend necessary program adjustments
• Establish risk mitigation strategies for high-risk vendors
• Conduct regular risk reporting and escalate critical vendor risks to leadership
• Leverage third-party risk management tools and technology to streamline all aspects of risk reporting
• Drive automation and efficiency improvements in team processes
• Responsible for adhering to third-party risk metrics supporting completeness, accuracy and timeliness of third-party risk activities
• Assists with acquiring data and providing information during Internal Audit Reviews and Regulatory Examinations

What you have

To ensure that we fulfill our promise of “challenging the status quo,” this role has specific qualifications that successful candidates should have.

Required Qualifications:

• Bachelor’s degree or equivalent professional experience is required
• 3+ years of professional experience in vendor management, risk management, or internal audit
• 2+ years of experience working in a highly regulated financial services environment
• Proficiency in third-party risk management tools and technologies solutions
• Strong understanding of risk frameworks, regulations, and best practices
• Knowledge of emerging vendor risks such as AI ethics, ESG risks, and geopolitical risk
• Knowledge of internal controls, financial/banking regulations, operational risk and/or vendor risk assessments
• Excellent analytical, problem-solving, and decision-making skills
• Leadership and stakeholder management abilities
• Professional certification(s) applicable to risk management such as the CTPRP or CRVPM
• Ability to work independently with close attention to detail with a record of tracking and measuring results
• Demonstrated ability to handle ambiguity, while implementing new requirements
• Able to build positive relationships throughout the organization
• Excellent interpersonal, verbal and written communication skills