Sr. Manager, Technology Risk Management
About The Position
The Asset Lifecycle Risk Management team provides independent oversight of technology risk and cyber resilience across Schwab’s technology portfolio. As a Senior Manager, Technology Risk Management, you will serve as a senior individual contributor responsible for overseeing risks associated with the full technology asset lifecycle, endpoint security and resilience, enterprise mobility management, and technology configuration. Your work will help ensure critical applications and services remain within the firm’s risk appetite and are designed to protect operational continuity and client trust. In this role, you will partner across Technology Operations, Data, Cybersecurity, Architecture, Site Reliability Engineering, Compliance, and Corporate Risk Management to identify emerging risks, evaluate controls, and strengthen resilience requirements within existing processes and technologies. You will use sound judgment to challenge risk decisions, advise stakeholders, and influence solutions that balance business priorities with effective risk management. You will also translate complex risk information into clear reporting and recommendations for senior leaders and management committees. By developing meaningful metrics, monitoring program maturity, and identifying opportunities for continuous improvement, you will help the firm make informed decisions and strengthen its technology and cyber resilience capabilities as risks, regulations, and industry practices continue to evolve.
Requirements
- Bachelor’s degree in Information Security, Computer Science, or a related field
- 5+ years of experience in third-party risk management, information security risk management, audit, oversight, SOX testing, operational risk management, or a similar risk and control function
- Experience identifying, assessing, monitoring, and communicating technology or cybersecurity risks
- Experience negotiating information security terms and conditions and providing effective challenge on technology and cyber resilience risks
- Demonstrated ability to apply independent judgment, analytical thinking, and structured problem solving to complex risk decisions
- Ability to communicate complex technical and risk information clearly to senior leaders, technical teams, business partners, and risk management stakeholders
- Ability to manage multiple priorities independently while collaborating across functions in a fast-paced environment
Nice To Haves
- CISM, CISSP, CRISC, CISA, or PMP certification
- Experience with technology asset lifecycle practices, including planning, acquisition, deployment, management, and retirement
- Knowledge of endpoint security, endpoint resilience, enterprise mobility management, and enterprise or service configuration
- Understanding of cybersecurity frameworks and assurance standards, including NIST, ISO 27001, and SOC 2
- Experience developing risk metrics, management reporting, and program maturity insights that support informed decision-making
- Experience providing risk oversight for technology platforms, critical applications, or operational resilience programs
- Experience developing or evaluating cyber recovery strategies within a large financial services organization
- Demonstrated success influencing stakeholders, building collaborative relationships, and strengthening risk and control processes without direct authority
- Ability to adapt to emerging threats, regulatory expectations, and changing business priorities while maintaining high standards for quality and execution
Responsibilities
- Overseeing risks associated with the full technology asset lifecycle, endpoint security and resilience, enterprise mobility management, and technology configuration.
- Partnering across Technology Operations, Data, Cybersecurity, Architecture, Site Reliability Engineering, Compliance, and Corporate Risk Management to identify emerging risks, evaluate controls, and strengthen resilience requirements within existing processes and technologies.
- Using sound judgment to challenge risk decisions, advise stakeholders, and influence solutions that balance business priorities with effective risk management.
- Translating complex risk information into clear reporting and recommendations for senior leaders and management committees.
- Developing meaningful metrics, monitoring program maturity, and identifying opportunities for continuous improvement.
Benefits
- bonus or incentive opportunities
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
