Sr. Manager, Technology Risk Management (Cyber Threat & Insider Risk)

Charles Schwab Inc.•Southlake, TX

1d•$120,000 - $150,000•Hybrid

About The Position

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s). As Schwab continues to expand its technology footprint across cloud, artificial intelligence, digital platforms, applications & APIs, and infrastructure services, the Technology Risk Management (TRM) team plays a critical role in helping ensure the company maintains a strong risk posture through independent oversight and risk-informed assurance activities. TRM has an opening in the Cyber Threat & Insider Risk discipline for an individual contributor to serve as the primary subject matter expert for second line oversight, effective challenge, and risk reporting of Security Operations, Digital Forensics, and Incident Response capabilities, processes, and controls. More specifically, this role reviews risks and control activities over cyber detection, monitoring, investigation, containment, and response. You will assess control effectiveness, identify systemic weaknesses, and ensure alignment with enterprise policies and standards, regulatory expectations, and industry best practices. You will review and challenge issue identification, closure, risk acceptances related to risks in your domain. You will maintain visibility into the firm's emerging threats and implementation of AI technologies and influence the implementation of expected monitoring, investigation, and response control activities. Success requires a self-starter attitude, strong desire to learn, building collaborative relationships with business partners, and the ability to assess and communicate technical risk clearly to executive, committee, regulatory, and technical audiences.

Requirements

5+ years of experience in Risk Management, Cybersecurity, or Internal Audit
Demonstrated Risk Assessment, Risk Identification, and Risk Prioritization experience
Ability to apply Analytical Thinking and Problem Solving to complex technology risk information
Strong Communication skills with the ability to present clear conclusions to technical and executive audiences
Demonstrated Collaboration and Stakeholder Management Influence skills across multiple functions and organizational levels
Applicants must be currently authorized to work in the United States on a full-time basis without employer sponsorship.

Nice To Haves

Bachelor’s degree
CISSP, CISM, CISA, CRISC, or an equivalent technology risk, cybersecurity, audit certification
Experience identifying and assessing risks associated with security operations, digital forensics, and/or cybersecurity incident response
Financial services industry experience
Demonstrated Self-Starter, Influencing Others, and Building Collaborative Relationship competencies in an evolving environment

Responsibilities

Serve as the primary subject matter expert for second line oversight, effective challenge, and risk reporting of Security Operations, Digital Forensics, and Incident Response capabilities, processes, and controls.
Review risks and control activities over cyber detection, monitoring, investigation, containment, and response.
Assess control effectiveness, identify systemic weaknesses, and ensure alignment with enterprise policies and standards, regulatory expectations, and industry best practices.
Review and challenge issue identification, closure, risk acceptances related to risks in your domain.
Maintain visibility into the firm's emerging threats and implementation of AI technologies and influence the implementation of expected monitoring, investigation, and response control activities.