Sr. Manager, Technology Risk Management (Cyber Threat & Insider Risk)

Charles Schwab Corporation; Southlake (TX); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Charles Schwab Corporation is seeking a Cyber Risk professional to act as the primary second-line expert for Security Operations, Digital Forensics, and Incident Response. You will assess risks, challenge controls, and ensure policy alignment while communicating with executives.

The role supports a hybrid schedule with four days in the office and one day remote, located in Indianapolis, IN; Omaha, NE; Austin, TX; or Southlake, TX. Applicants must reside in or relocate at their own expense.

Qualifications

• 5+ years in Risk Management, Cybersecurity, or Internal Audit.
• Risk assessment, identification, and prioritization experience.
• Analytical thinking and problem solving for tech risk.
• Strong communication to executive audiences.
• Collaboration and stakeholder management across functions.

Responsibilities

• Review risks and control activities over cyber detection, monitoring, investigation, containment, and response.
• Assess control effectiveness and identify systemic weaknesses.
• Ensure alignment with enterprise policies, standards, and regulatory expectations.
• Review and challenge issue identification, closure, and risk acceptances.
• Maintain visibility into emerging threats and AI-driven monitoring and response.
• Communicate risks clearly to executives, committees, and technical audiences.

Skills

Risk management

Cybersecurity

Risk assessment

Risk prioritization

Analytical thinking

Problem solving

Communication

Collaboration

Stakeholder management

Education

Bachelor’s degree

CISSP/CISM/CISA/CRISC

Job description

Your Opportunity

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

As Schwab continues to expand its technology footprint across cloud, artificial intelligence, digital platforms, applications & APIs, and infrastructure services, the Technology Risk Management (TRM) team plays a critical role in helping ensure the company maintains a strong risk posture through independent oversight and risk-informed assurance activities.

TRM has an opening in the Cyber Threat & Insider Risk discipline for an individual contributor to serve as the primary subject matter expert for second line oversight, effective challenge, and risk reporting of Security Operations, Digital Forensics, and Incident Response capabilities, processes, and controls. More specifically, this role reviews risks and control activities over cyber detection, monitoring, investigation, containment, and response. You will assess control effectiveness, identify systemic weaknesses, and ensure alignment with enterprise policies and standards, regulatory expectations, and industry best practices. You will review and challenge issue identification, closure, risk acceptances related to risks in your domain. You will maintain visibility into the firm’s emerging threats and implementation of AI technologies and influence the implementation of expected monitoring, investigation, and response control activities. Success requires a self-starter attitude, strong desire to learn, building collaborative relationships with business partners, and the ability to assess and communicate technical risk clearly to executive, committee, regulatory, and technical audiences.

Please note: This position is Monday through Friday during standard business hours and follows a hybrid work model with four days in the office and one day working from home. The role is available only in Indianapolis, IN; Omaha, NE; Austin, TX and Southlake, TX (DFW). Candidates must reside in or be willing to relocate at their own expense to one of the listed locations.

Applicants must be currently authorized to work in the United States on a full-time basis without employer sponsorship.

What you have

To ensure that we have fulfilled our promise of "challenging the status quo," this role has specific qualifications that successful candidates should have.

Required qualifications:

• 5+ years of experience in Risk Management, Cybersecurity, or Internal Audit
• Demonstrated Risk Assessment, Risk Identification, and Risk Prioritization experience
• Ability to apply Analytical Thinking and Problem Solving to complex technology risk information
• Strong Communication skills with the ability to present clear conclusions to technical and executive audiences
• Demonstrated Collaboration and Stakeholder Management Influence skills across multiple functions and organizational levels

Preferred qualifications:

• Bachelor’s degree
• CISSP, CISM, CISA, CRISC, or an equivalent technology risk, cybersecurity, audit certification
• Experience identifying and assessing risks associated with security operations, digital forensics, and/or cybersecurity incident response
• Financial services industry experience
• Demonstrated Self-Starter, Influencing Others, and Building Collaborative Relationship competencies in an evolving environment

In addition to the salary range, this role is also eligible for bonus or incentive opportunities