Sr Manager, Technology Risk Management (PL)

Charles Schwab; Phoenix (AZ); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

401(k) with company match

Paid vacation & volunteering time

Paid parental leave

Tuition reimbursement

Health, dental, and vision insurance

Job summary

Charles Schwab is seeking a Sr Manager of Technology Risk Management to lead the TISO program and a team of risk professionals within STS Risk Services. The role drives risk framework alignment, escalation routines, and governance to ensure timely remediation and executive visibility.

The position requires extensive experience in technology risk, strong leadership, and the ability to influence across functions.

Qualifications

• 8+ years in technology risk management, cybersecurity, audit, oversight, or related risk function.
• Demonstrated people leadership, coaching, performance management, and development of risk professionals.
• Experience managing a risk program, governance routines, and continuous improvement.

Responsibilities

• Lead the TISO program and team; define responsibilities, coverage, and service expectations across STS.
• Develop team capability through coaching, delegation, and performance management.
• Advise senior leadership; translate risk requirements into actions and priorities.

Skills

Risk management

Leadership

Executive communication

Stakeholder management

RCSA

Governance

Education

Bachelor's in computer science or related

CISSP/CISM/CISA/CRISC certifications (plus)

Job description

Your opportunity

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

The Sr Manager, Technology Risk Management (PL) leads the Technology Information Security Officers (TISO) program and team, formerly known as Risk Champions, within STS Risk Services. This first-line people leader is accountable for informing and consulting STS senior leadership on enterprise programs supported by STS Standards and driving consistent execution against Technology and Cybersecurity risk frameworks.

The role directs a team of vertically aligned TISOs who help STS leaders understand applicable program requirements, identify teams and activities in scope, assess performance against required practices, and prioritize actions to address gaps. The leader establishes consistent program guidance, quality expectations, reporting, and escalation routines that provide visibility into participation, adherence, execution delays, and remediation progress. The role owns the TISO operating model and team delivery while maintaining clear accountability with enterprise program owners for program requirements and with technology and control owners for implementation and remediation.

Position Responsibilities:

• Lead the TISO program and team: Manage the transition from Risk Champions to TISOs and define team responsibilities, coverage, engagement practices, and service expectations to support consistent first-line risk management across STS.

• Develop team capability: Lead, coach, and develop risk professionals; establish objectives, delegate accountability, manage performance and capacity, and build the skills needed to deliver effective risk consultation.

• Advise senior leadership: Consult STS Managing Directors and Directors on enterprise programs and STS Standards, translating Technology and Cybersecurity risk requirements into clear business obligations, priorities, risks, and recommended actions.

• Establish program coverage: Partner with enterprise program and standards owners to define which STS teams, technologies, processes, and activities are in scope, including required practices, accountable owners, deliverables, and timelines.
• Drive consistent execution: Direct TISO coordination with technology and control owners to communicate requirements, clarify expectations, monitor commitments, and resolve execution barriers while maintaining appropriate ownership of controls and remediation.

• Oversee reporting and escalation: Deliver executive-ready reporting on participation, completion, risk and control indicators, gaps, and management commitments. Escalate missed milestones, deteriorating indicators, unresolved ownership, and capacity or dependency constraints with clear risks and decisions needed.

• Monitor corrective actions: Partner with accountable owners to establish response plans, track remediation, and elevate overdue or insufficient actions through established issue management and governance processes.

• Maintain governance and quality: Own TISO procedures, practice guidance, templates, quality standards, and governance routines to promote accurate, timely, consistent, and evidence-supported execution.

• Coordinate risk and control activities: Guide TISO support for RCSA, risk and control blueprints, control procedure inventories, issue management, audits, regulatory examinations, and control validation while coordinating across responsible functions to minimize duplication.

• Identify enterprise risk themes: Synthesize emerging risks, recurring control weaknesses, performance trends, and execution barriers across STS organizations to inform leadership prioritization and targeted improvements.

What you have

Required Qualifications:

• 8+ years of experience in technology risk management, cybersecurity, audit, oversight, SOX testing, or a related technology risk function.
• Demonstrated people leadership experience, including coaching, performance management, delegation, workload prioritization, and development of risk professionals.
• Experience managing a risk program or team operating model, including procedures, governance routines, quality assurance, stakeholder engagement, and continuous improvement.
• Strong knowledge of technology and cybersecurity risks, control design and evaluation, and frameworks such as NIST, ISO, and COBIT.
• Ability to translate enterprise programs, standards, and risk framework requirements into clear applicability, ownership, execution expectations, and management actions.
• Experience advising senior leaders and communicating complex risk matters through concise written assessments, executive presentations, and actionable recommendations.
• Demonstrated ability to influence and negotiate across technology, business, cybersecurity, enterprise program, and oversight functions, including the first and second lines of defense.
• Experience developing or overseeing risk metrics, scorecards, and executive dashboards that communicate program scope, adherence, control performance, execution gaps, and remediation progress.
• Strong analytical and technical problem-solving skills, including the ability to investigate complex issues, identify root causes, evaluate alternatives, and recommend practical solutions.
• Experience supporting RCSA, risk and control blueprints, control procedure governance, issue management, audits, regulatory examinations, or control validation.
• Ability to work independently within delegated authority, manage competing priorities, lead cross-functional working groups, and elevate matters requiring senior leadership decisions.
• Bachelor's degree in computer science or related discipline, or commensurate industry experience.
• Industry certifications such as CISSP, CISM, CISA, or CRISC are a plus.

In addition to the salary range, this role is also eligible for bonus or incentive opportunities.

What’s in it for you

At Schwab, you’re empowered to shape your future. We champion your growth through meaningful work, continuous learning, and a culture of trust and collaboration—so you can build the skills to make a lasting impact. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.

We offer a competitive benefits package that takes care of the whole you – both today and in the future:

• 401(k) with company match and Employee stock purchase plan
• Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
• Paid parental leave and family building benefits
• Tuition reimbursement
• Health, dental, and vision insurance