Manager, Technology Risk

Charles Schwab Inc.•Austin, TX

1d•$115,000 - $150,000•Onsite

About The Position

As a Technology Risk Manager focused on application security, you will help strengthen Schwab’s ability to identify, assess, monitor, and manage technology risk across critical security and software development practices. This role sits at the intersection of cybersecurity, risk oversight, and business partnership, giving you the opportunity to influence how application security and penetration testing risks are understood, prioritized, and reduced across the firm. In this individual contributor role, you will partner with technology, security, risk, audit, and business teams to evaluate risk management practices, assess alignment with policies and standards, and provide independent oversight of application security and software development life cycle processes. Your work will help protect client assets, client information, and firm assets by bringing structure, sound judgment, and clear reporting to complex risk topics. You will use analytical thinking, effective communication, and practical problem-solving to translate technical risk into actionable insight for stakeholders at varying levels of expertise. Success in this role requires the ability to build trust, influence sustainable change, and adapt in a fast-moving environment where strong decisions, collaborative partnership, and risk-based prioritization directly support Schwab’s commitment to integrity, resilience, and client trust.

Requirements

3+ years of demonstrated experience in cybersecurity, information technology, technology audit, or technology risk management
Understanding of application security and software development life cycle practices, including how related risks are identified, assessed, and managed
Ability to identify, assess, and prioritize technology and cybersecurity risks using established risk assessment methodologies
Experience evaluating processes for alignment with published policies, standards, controls, regulatory expectations, and industry best practices
Ability to communicate complex technical and risk concepts clearly to both technical and executive audiences
Strong analytical thinking, problem-solving, decision-making, prioritization, influencing, and conflict resolution skills
Experience developing and reporting cybersecurity metrics to quantify risk reduction and program effectiveness.
Demonstrated ability to collaborate across functional teams and bring diverse points of view together to drive risk-informed outcomes
Ability to adapt in an evolving environment while meeting critical commitments under pressure

Nice To Haves

Bachelor’s degree in Business Risk Management, Computer Science, Information Systems, Business Administration, or a related field; equivalent work experience may be considered
Hands-on risk management or oversight experience in a financial services or highly regulated environment
Professional certification such as CISSP, CISA, CISM, CRISC, CPCB, or a related credential
Experience supporting oversight of application security, penetration testing, software development life cycle, or cybersecurity risk management programs
Experience reviewing and assessing compliance against technology policies, standards, and controls
Experience developing, analyzing, and reporting metrics to measure risk reduction, control effectiveness, or program performance
Knowledge of data analysis, reporting, or visualization tools such as Tableau or Power BI
Experience working with internal auditors, regulators, or senior stakeholders to explain technology risk frameworks, issues, progress, and mitigation strategies

Responsibilities

Identify, assess, monitor, and manage technology risk across critical security and software development practices.
Evaluate risk management practices.
Assess alignment with policies and standards.
Provide independent oversight of application security and software development life cycle processes.
Protect client assets, client information, and firm assets by bringing structure, sound judgment, and clear reporting to complex risk topics.
Use analytical thinking, effective communication, and practical problem-solving to translate technical risk into actionable insight for stakeholders at varying levels of expertise.
Build trust, influence sustainable change, and adapt in a fast-moving environment.
Make strong decisions, foster collaborative partnerships, and prioritize based on risk.
Develop and report cybersecurity metrics to quantify risk reduction and program effectiveness.
Collaborate across functional teams and bring diverse points of view together to drive risk-informed outcomes.
Adapt in an evolving environment while meeting critical commitments under pressure.
Support oversight of application security, penetration testing, software development life cycle, or cybersecurity risk management programs.
Review and assess compliance against technology policies, standards, and controls.
Develop, analyze, and report metrics to measure risk reduction, control effectiveness, or program performance.
Work with internal auditors, regulators, or senior stakeholders to explain technology risk frameworks, issues, progress, and mitigation strategies.