Sr Manager, Technology Risk Management (PL)

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

The Sr Manager, Technology Risk Management (PL) leads the Technology Information Security Officers (TISO) program and team, formerly known as Risk Champions, within STS Risk Services. This first-line people leader is accountable for informing and consulting STS senior leadership on enterprise programs supported by STS Standards and driving consistent execution against Technology and Cybersecurity risk frameworks.

The role directs a team of vertically aligned TISOs who help STS leaders understand applicable program requirements, identify teams and activities in scope, assess performance against required practices, and prioritize actions to address gaps. The leader establishes consistent program guidance, quality expectations, reporting, and escalation routines that provide visibility into participation, adherence, execution delays, and remediation progress. The role owns the TISO operating model and team delivery while maintaining clear accountability with enterprise program owners for program requirements and with technology and control owners for implementation and remediation.

• →
  • →
    • →8+ years of experience in technology risk management, cybersecurity, audit, oversight, SOX testing, or a related technology risk function. 
    • →Demonstrated people leadership experience, including coaching, performance management, delegation, workload prioritization, and development of risk professionals. 
    • →Experience managing a risk program or team operating model, including procedures, governance routines, quality assurance, stakeholder engagement, and continuous improvement. 
    • →Strong knowledge of technology and cybersecurity risks, control design and evaluation, and frameworks such as NIST, ISO, and COBIT. 
    • →Ability to translate enterprise programs, standards, and risk framework requirements into clear applicability, ownership, execution expectations, and management actions. 
    • →Experience advising senior leaders and communicating complex risk matters through concise written assessments, executive presentations, and actionable recommendations. 
    • →Demonstrated ability to influence and negotiate across technology, business, cybersecurity, enterprise program, and oversight functions, including the first and second lines of defense. 
    • →Experience developing or overseeing risk metrics, scorecards, and executive dashboards that communicate program scope, adherence, control performance, execution gaps, and remediation progress. 
    • →Strong analytical and technical problem-solving skills, including the ability to investigate complex issues, identify root causes, evaluate alternatives, and recommend practical solutions. 
    • →Experience supporting RCSA, risk and control blueprints, control procedure governance, issue management, audits, regulatory examinations, or control validation. 
    • →Ability to work independently within delegated authority, manage competing priorities, lead cross-functional working groups, and escalate matters requiring senior leadership decisions. 
    • →Bachelor's degree in computer science or related discipline, or commensurate industry experience. 
    • →Industry certifications such as CISSP, CISM, CISA, or CRISC are a plus.

  In addition to the salary range, this role is also eligible for bonus or incentive opportunities.