Risk Manager

Your OpportunityAt Schwab, you're empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).The Asset Lifecycle Risk Management team provides independent oversight of technology risk and cyber resilience across Schwab's technology portfolio. As a Senior Manager, Technology Risk Management, you will serve as a senior individual contributor responsible for overseeing risks associated with the full technology asset lifecycle, endpoint security and resilience, enterprise mobility management, and technology configuration. Your work will help ensure critical applications and services remain within the firm's risk appetite and are designed to protect operational continuity and client trust.In this role, you will partner across Technology Operations, Data, Cybersecurity, Architecture, Site Reliability Engineering, Compliance, and Corporate Risk Management to identify emerging risks, evaluate controls, and strengthen resilience requirements within existing processes and technologies. You will use sound judgment to challenge risk decisions, advise stakeholders, and influence solutions that balance business priorities with effective risk management.You will also translate complex risk information into clear reporting and recommendations for senior leaders and management committees. By developing meaningful metrics, monitoring program maturity, and identifying opportunities for continuous improvement, you will help the firm make informed decisions and strengthen its technology and cyber resilience capabilities as risks, regulations, and industry practices continue to evolve.What You HaveRequired qualificationsBachelor's degree in Information Security, Computer Science, or a related field5+ years of experience in third-party risk management, information security risk management, audit, oversight, SOX testing, operational risk management, or a similar risk and control functionExperience identifying, assessing, monitoring, and communicating technology or cybersecurity risksExperience negotiating information security terms and conditions and providing effective challenge on technology and cyber resilience risksDemonstrated ability to apply independent judgment, analytical thinking, and structured problem solving to complex risk decisionsAbility to communicate complex technical and risk information clearly to senior leaders, technical teams, business partners, and risk management stakeholdersAbility to manage multiple priorities independently while collaborating across functions in a fast-paced environmentPreferred qualificationsCISM, CISSP, CRISC, CISA, or PMP certificationExperience with technology asset lifecycle practices, including planning, acquisition, deployment, management, and retirementKnowledge of endpoint security, endpoint resilience, enterprise mobility management, and enterprise or service configurationUnderstanding of cybersecurity frameworks and assurance standards, including NIST, ISO 27001, and SOC 2Experience developing risk metrics, management reporting, and program maturity insights that support informed decision-makingExperience providing risk oversight for technology platforms, critical applications, or operational resilience programsExperience developing or evaluating cyber recovery strategies within a large financial services organizationDemonstrated success influencing stakeholders, building collaborative relationships, and strengthening risk and control processes without direct authorityAbility to adapt to emerging threats, regulatory expectations, and changing business priorities while maintaining high standards for quality and executionIn addition to the salary range, this role is eligible for bonus or incentive opportunities.