Business Information Security Officer (BISO) - Digital Assets

Charles Schwab; Omaha (NE); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

401(k) with company match

Employee stock purchase plan

Paid time for vacation and volunteering

28-day sabbatical after five years of service

Paid parental leave

Tuition reimbursement

Health, dental, and vision insurance

Job summary

A leading financial services company in Omaha is seeking a Business Information Security Officer to serve as a cybersecurity risk liaison for digital asset initiatives. This role requires 7+ years in cybersecurity or technology risk and offers the opportunity to influence security policies while working collaboratively with business units. The benefits include a competitive package supporting professional growth and hybrid work flexibility.

Qualifications

• 7+ years in cybersecurity or technology risk.
• Strong communication and risk articulation skills.
• Experience with digital assets, blockchain, or crypto custody/security.
• Familiarity with cybersecurity frameworks: NIST CSF, NIST 800-53, SOC 2, FFIEC.
• Strong communication and risk articulation skills.

Responsibilities

• Serve as the embedded security partner for Digital Assets business teams.
• Lead end-to-end cybersecurity risk assessments for digital asset products.
• Own the security risk lifecycle for digital asset vendors.
• Educate business and engineering teams on Schwab’s cybersecurity policies.
• Prepare internal/external audit activities and ensure controls operate effectively.
• Collaborate with Cyber Operations for crypto-specific incident preparedness.
• Produce business-focused reporting on risk and present to leadership.

Skills

Communication and risk articulation

Familiarity with cybersecurity frameworks: NIST CSF, NIST 800-53, SOC 2, FFIEC

Experience with digital assets, blockchain, or crypto custody/security

Security governance

Education

Bachelor’s degree in Information Security, Computer Science, Engineering, or related field

Tools

GRC platforms

Penetration testing

Job description

Overview

Your opportunity

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

The Business Information Security Officer (BISO) is a subject matter professional (SMP) within the Technology Risk & Cybersecurity Compliance (TRACC) team under the Schwab Cybersecurity Services (SCS) organization. The Digital Assets BISO acts as the primary cybersecurity risk liaison and advisor for Schwab business units engaged in cryptocurrency and digital asset–related products, services, and vendor partnerships. This role ensures that all digital asset initiatives adhere to Schwab’s cybersecurity policies and procedures, while enabling innovation in a secure and compliant manner.

Responsibilities

• Cybersecurity Governance & Business Alignment: Serve as the embedded security partner for Digital Assets business teams, aligning security requirements with product and operational objectives; translate enterprise cybersecurity policies and procedures into practical, actionable expectations for digital asset initiatives; participate in project planning, architecture reviews, and roadmap discussions to ensure secure design and regulatory alignment; support risk exception, risk acceptance, and mitigation processes.
• Digital Asset & Cryptocurrency Risk Assessments: Lead end-to-end cybersecurity risk assessments for digital asset products, crypto custody models, wallet operations, blockchain integrations, and supporting vendors; evaluate risks related to private key management, wallet operations, smart contract risks, node infrastructure, and transaction processes; document risks, recommend compensating controls, and track remediation to closure.
• Vendor Cybersecurity Oversight: Own the security risk lifecycle for digital asset vendors—from due diligence and contract negotiation to ongoing monitoring; review vendor cybersecurity evidence (SOC 2, pen tests, questionnaires, cloud posture); ensure contractual controls for data protection, breach notification, crypto asset handling, and regulatory adherence; track and drive remediation of vendor findings.
• Education, Policy, and Standards Enablement: Educate business, engineering, and operations teams on Schwab’s cybersecurity policies and secure practices; develop crypto-specific security training and guidance; promote a culture of security awareness.
• Compliance, Audit, and Regulatory Support: Prepare and coordinate internal/external audit activities; ensure controls operate effectively and evidence is complete; support alignment with SEC, FINRA, OCC, FFIEC, and other regulatory expectations.
• Cyber Incident Preparedness & Response: Collaborate with Cyber Operations and IR teams for crypto-specific incident preparedness; contribute to playbooks for key compromise, vendor breaches, on-chain exploits, and blockchain outages.
• Risk Reporting & Executive Communication: Produce business-focused reporting on residual risk, vendor posture, assessment outcomes, KRIs, and audit findings; present risks and recommendations to leadership.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Engineering, or related field.
• 7+ years in cybersecurity or technology risk.
• Experience with digital assets, blockchain, or crypto custody/security.
• Familiarity with cybersecurity frameworks: NIST CSF, NIST 800-53, SOC 2, FFIEC.
• Strong communication and risk articulation skills.

Preferred Qualifications

• Cybersecurity related certification such as: CISSP, CISM, CRISC, CCSP, CISA or similar.
• Crypto-focused credentials or blockchain training.
• Knowledge of key management systems, smart contract risks, and cloud security.
• Experience with GRC (Governance Risk & Compliance) platforms.

What’s in it for you

At Schwab, you’re empowered to shape your future. We champion your growth through meaningful work, continuous learning, and a culture of trust and collaboration—so you can build the skills to make a lasting impact. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.

We offer a competitive benefits package that takes care of the whole you – both today and in the future:

• 401(k) with company match and Employee stock purchase plan
• Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
• Paid parental leave and family building benefits
• Tuition reimbursement
• Health, dental, and vision insurance