Senior Technology Risk Management - AI

About the role

As a Senior Manager in Technology Risk Management (TRM), part of Corporate Risk Management (CRM), you will play a critical role in protecting Schwab’s technology ecosystem. You will partner with Corporate Risk Management, technology, security, and business teams to identify, assess, monitor, and mitigate technology risk, ensuring alignment with the firm's risk appetite while protecting client assets, client information, and Schwab’s operational environment.

In this Technology Architecture Governance Risk (TAGR) role, you will provide independent oversight of Artificial Intelligence (AI) technologies. You will influence enterprise-wide AI governance outcomes by evaluating the effectiveness of AI solutions and emerging technologies, assessing compliance with technology policies, standards, and controls, and driving improvements that strengthen risk management practices. Your responsibilities will include conducting risk assessments, developing meaningful metrics and reporting, and providing insights that support executive decision-making.

Success in this role requires navigating complex environments, analyzing emerging risks, balancing competing priorities, and building trusted partnerships across technology, risk, audit, security, and business functions. You will collaborate with these teams to evaluate AI-related controls, monitor risk trends and performance metrics, support policy and standards development, assess third-party and platform risks, and contribute to operational resilience initiatives.

Responsibilities

• Provide independent oversight of AI technologies and emerging technologies to ensure alignment with the firm’s risk appetite, regulatory requirements, and operational resilience objectives.
• Evaluate the effectiveness of AI solutions, assessing compliance with technology policies, standards, and controls.
• Conduct risk assessments, develop risk reporting, metrics, and dashboards, and provide data-driven insights for executive decision-making.
• Collaborate with technology, security, compliance, audit, and business teams to evaluate AI-related controls and monitor risk trends.
• Support the development of technology policies, standards, and governance requirements.
• Assess third-party and platform risks associated with AI and emerging technologies.
• Contribute to operational resilience initiatives, cyber risk management, and incident response programs.
• Review AI-enabled software development lifecycle (SDLC) or engineering workflows, including AI-assisted development environments.
• Apply AI risk concepts, governance considerations, and risk management practices across the AI lifecycle.
• Utilize AI evaluation techniques such as bias testing, explainability, model performance monitoring, and validation approaches.
• Influence stakeholders and drive outcomes across multiple business functions, including technology, security, risk, compliance, and audit teams.

Requirements

• 5+ years of experience in technology operations, technology risk management, information security, governance, compliance, audit, or a related discipline.
• Experience reviewing AI-enabled software development lifecycle (SDLC) or engineering workflows, including AI-assisted development environments.
• Knowledge of AI risk concepts, governance considerations, and risk management practices across the AI lifecycle.
• Familiarity with AI evaluation techniques such as bias testing, explainability, model performance monitoring, and validation approaches.
• Experience developing risk reporting, metrics, dashboards, or executive-level governance materials.
• Working knowledge of technology risk management frameworks and industry standards, including NIST, COBIT, FFIEC, or similar guidance.
• Understanding of applicable regulatory, compliance, and legal requirements, including GDPR, PCI, FFIEC, GLBA, SOX, or comparable regulations.
• Demonstrated ability to identify, assess, prioritize, and communicate technology and operational risks through data-driven analysis and strategic recommendations.
• Strong analytical, problem-solving, critical thinking, and decision-making skills.
• Excellent written and verbal communication skills, with the ability to translate complex technical concepts for both technical and executive audiences.
• Experience influencing stakeholders, collaborating effectively, and driving outcomes across multiple business functions.
• Ability to manage multiple priorities and deliver results in a fast-paced, highly regulated environment.
• Ability to work independently and proactively with minimal direction.
• Bachelor’s degree in Business Risk Management, Computer Science, Information Systems, Business Administration, or a related field, or equivalent combination of education and experience.

Preferred Qualifications

• Experience providing technology risk management oversight within financial services or another highly regulated industry.
• Experience assessing compliance with technology policies, standards, controls, and governance requirements.
• Experience supporting operational resilience, cyber risk, incident management, or risk mitigation programs.
• Experience evaluating risks associated with generative AI, agentic AI, machine learning, or other emerging technologies.
• Experience with data analysis, reporting, and visualization tools such as Tableau, Power BI, or similar platforms.
• Professional certifications such as CISSP, CISA, CISM, CRISC, CPCB, or equivalent credentials.
• Advanced degree in a relevant discipline.

Benefits

• 401(k) with company match and Employee Stock Purchase Plan.
• Paid time for vacation, volunteering, and a 28-day sabbatical after every 5 years of service for eligible positions.
• Paid parental leave and family-building benefits.
• Tuition reimbursement.
• Health, dental, and vision insurance.

In addition to the salary range, this role is eligible for bonus or incentive opportunities.