Senior Technology Risk Management - AI

About the role

Technology Risk Management (TRM), part of Corporate Risk Management (CRM), partners with technology and business teams to identify, assess, and manage risks associated with emerging technologies and critical business processes. This work helps ensure alignment with the firm's risk appetite while protecting client assets, client information, and Schwab’s operational environment.

Responsibilities

• Play a critical role in protecting Schwab’s technology ecosystem by partnering with Corporate Risk Management, technology, security, and business teams to identify, assess, monitor, and mitigate technology risk.
• Provide independent oversight of Artificial Intelligence (AI) technologies, helping ensure technology initiatives align with the firm's risk appetite, regulatory requirements, and operational resilience objectives.
• Influence enterprise-wide AI governance outcomes by evaluating the effectiveness of AI Solutions and emerging technologies, assessing compliance with technology policies, standards, and controls, and driving improvements that strengthen risk management practices.
• Conduct risk assessments, develop meaningful metrics and reporting, and provide insights that support executive decision-making.
• Navigate complex environments, analyze emerging risks, balance competing priorities, and build trusted partnerships across technology, risk, audit, security, and business functions.
• Collaborate with technology, security, compliance, audit, and business teams to evaluate AI-related controls, monitor risk trends and performance metrics, support policy and standards development, assess third-party and platform risks, and contribute to operational resilience initiatives.

Requirements

• 5+ years of experience in technology operations, technology risk management, information security, governance, compliance, audit, or a related discipline.
• Experience reviewing AI-enabled software development lifecycle (SDLC) or engineering workflows, including AI-assisted development environments.
• Knowledge of AI risk concepts, governance considerations, and risk management practices across the AI lifecycle.
• Familiarity with AI evaluation techniques such as bias testing, explainability, model performance monitoring, and validation approaches.
• Experience developing risk reporting, metrics, dashboards, or executive-level governance materials.
• Working Knowledge of technology risk management frameworks and industry standards, including NIST, COBIT, FFIEC, or similar guidance.
• Understanding of applicable regulatory, compliance, and legal requirements, including GDPR, PCI, FFIEC, GLBA, SOX, or comparable regulations.
• Demonstrated ability to identify, assess, prioritize, and communicate technology and operational risks through data-driven analysis and strategic recommendations.
• Strong analytical, problem-solving, critical thinking, and decision-making skills.
• Excellent written and verbal communication skills with the ability to translate complex technical concepts for both technical and executive audiences.
• Experience influencing stakeholders, collaborating effectively, and driving outcomes across multiple business functions, including technology, security, risk, compliance, and audit teams.
• Experience managing multiple priorities and delivering results in a fast-paced, highly regulated environment.
• Ability to work independently and proactively with minimal direction.
• Bachelor’s degree in Business Risk Management, Computer Science, Information Systems, Business Administration, or a related field, or equivalent combination of education and experience.

Preferred Qualifications

• Experience providing technology risk management oversight within financial services or another highly regulated industry.
• Experience assessing compliance with technology policies, standards, controls, and governance requirements.
• Experience supporting operational resilience, cyber risk, incident management, or risk mitigation programs.
• Experience evaluating risks associated with generative AI, agentic AI, machine learning, or other emerging technologies.
• Experience of data analysis, reporting, and visualization tools such as Tableau, Power BI, or similar platforms.
• Professional certifications such as CISSP, CISA, CISM, CRISC, CPCB, or equivalent credentials.
• Advanced degree in a relevant discipline.

Benefits

• 401(k) with company match and Employee stock purchase plan.
• Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions.
• Paid parental leave and family building benefits.
• Tuition reimbursement.
• Health, dental, and vision insurance.