Technology Risk Management Lead - Sr. Manager

About the role

The Technology and Cyber Resilience Oversight team serves as a critical second line of defense within the Operational Resilience organization, helping ensure that Schwab’s technology services, infrastructure, and applications operate within the firm’s risk appetite while maintaining resilience against evolving cyber threats.

Responsibilities

• Partner closely with Technology Operations, Engineering, Architecture, Data, Cybersecurity, and Risk Management teams to identify, assess, and oversee technology and cyber resilience risks.
• Help shape and enhance resilience capabilities related to recovery planning, cyber recovery strategies, architectural resilience, and platform resiliency while ensuring critical services remain available, recoverable, and aligned to business objectives.
• Balance strategic thinking with hands-on problem solving, leveraging data-driven insights and risk metrics to evaluate resilience maturity, identify control enhancement opportunities, and communicate actionable recommendations to senior leadership.
• Serve as a trusted advisor across the organization, influencing stakeholders at all levels and fostering collaboration among technology, risk, compliance, and business partners.
• Communicate effectively, demonstrate strong analytical thinking, and make sound decisions to strengthen resilience controls, support regulatory expectations, promote continuous improvement, and maintain Schwab’s commitment to protecting client trust.
• Stay informed on emerging threats, technology trends, industry frameworks, and resilience best practices to ensure the firm remains prepared to respond to a dynamic risk environment.

Requirements

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• 8+ years of experience in information security risk management, operational risk management, technology risk management, audit, oversight, SOX testing, third-party risk management, or a related discipline.
• Experience managing technology and cyber resilience risks within complex enterprise environments.
• Experience developing, assessing, or overseeing cyber recovery, recovery planning, resiliency strategies, and resilience controls.
• Strong knowledge of cybersecurity and risk management frameworks, including NIST, ISO 27001, SOC 2, or comparable standards.
• Demonstrated ability to analyze complex risk scenarios, evaluate control effectiveness, and support risk-based decision making.
• Strong written and verbal communication skills with the ability to influence senior leaders and build effective working relationships across multiple stakeholder groups.
• Proven ability to manage competing priorities, navigate ambiguity, and deliver results in a fast-paced environment.
• Strong collaboration skills with experience partnering across technology, cybersecurity, compliance, risk, and business functions.

Preferred Qualifications

• 10+ years of experience supporting technology resilience, cybersecurity, operational resilience, or enterprise risk programs within financial services.
• Professional certifications such as CISM, CISSP, CRISC, CISA, PMP, or equivalent.
• Experience building or overseeing cyber recovery strategies for large financial services organizations.
• Experience developing resilience metrics, executive reporting, and governance materials for senior leadership and management committees.
• Knowledge of modern infrastructure platforms, cloud technologies, site reliability practices, and resilient architecture concepts.
• Demonstrated leadership experience influencing cross-functional teams and driving enterprise-wide initiatives without direct authority.

Benefits

• 401(k) with company match and Employee stock purchase plan.
• Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions.
• Paid parental leave and family building benefits.
• Tuition reimbursement.
• Health, dental, and vision insurance.