Manager, Technology Risk

About the role

As a Technology Risk Manager focused on application security, you will help strengthen Schwab's ability to identify, assess, monitor, and manage technology risk across critical security and software development practices.

Responsibilities

• Partner with technology, security, risk, audit, and business teams to evaluate risk management practices, assess alignment with policies and standards, and provide independent oversight of application security and software development life cycle processes.
• Use analytical thinking, effective communication, and practical problem-solving to translate technical risk into actionable insight for stakeholders at varying levels of expertise.
• Build trust, influence sustainable change, and adapt in a fast-moving environment where strong decisions, collaborative partnership, and risk-based prioritization directly support Schwab's commitment to integrity, resilience, and client trust.

Requirements

• 3+ years of demonstrated experience in cybersecurity, information technology, technology audit, or technology risk management.
• Understanding of application security and software development life cycle practices, including how related risks are identified, assessed, and managed.
• Experience evaluating processes for alignment with published policies, standards, controls, regulatory expectations, and industry best practices.
• Strong analytical thinking, problem-solving, decision-making, prioritization, influencing, and conflict resolution skills.
• Experience developing and reporting cybersecurity metrics to quantify risk reduction and program effectiveness.
• Demonstrated ability to collaborate across functional teams and bring diverse points of view together to drive risk-informed outcomes.
• Ability to adapt in an evolving environment while meeting critical commitments under pressure.

Qualifications

• Bachelor’s degree in Business Risk Management, Computer Science, Information Systems, Business Administration, or a related field; equivalent work experience may be considered.
• Hands-on risk management or oversight experience in a financial services or highly regulated environment.
• Professional certification such as CISSP, CISA, CISM, CRISC, CPCB, or a related credential.
• Experience supporting oversight of application security, penetration testing, software development life cycle, or cybersecurity risk management programs.
• Experience reviewing and assessing compliance against technology policies, standards, and controls.
• Experience developing, analyzing, and reporting metrics to measure risk reduction, control effectiveness, or program performance.
• Knowledge of data analysis, reporting, or visualization tools such as Tableau or Power BI.
• Experience working with internal auditors, regulators, or senior stakeholders to explain technology risk frameworks, issues, progress, and mitigation strategies.

Skills

• Strong analytical thinking and problem-solving skills.
• Effective communication and practical problem-solving abilities.
• Ability to build trust and influence sustainable change.
• Adaptability in a fast-moving environment.

Benefits

• Competitive benefits package including a 401(k) with company match and Employee stock purchase plan.
• Paid time off for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions.
• Paid parental leave and family building benefits.
• Tuition reimbursement.
• Health, dental, and vision insurance.

Pay

This role is eligible for bonus or incentive opportunities.

Schedule

Hybrid Work and Flexibility approach balances ongoing commitment to workplace flexibility, serving clients, and strong belief in the value of being together in person on a regular basis.