Manager, Technology Risk

Your Opportunity

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

 

As a Technology Risk Manager focused on application security, you will help strengthen Schwab’s ability to identify, assess, monitor, and manage technology risk across critical security and software development practices. This role sits at the intersection of cybersecurity, risk oversight, and business partnership, giving you the opportunity to influence how application security and penetration testing risks are understood, prioritized, and reduced across the firm.

 

In this individual contributor role, you will partner with technology, security, risk, audit, and business teams to evaluate risk management practices, assess alignment with policies and standards, and provide independent oversight of application security and software development life cycle processes. Your work will help protect client assets, client information, and firm assets by bringing structure, sound judgment, and clear reporting to complex risk topics.

 

You will use analytical thinking, effective communication, and practical problem-solving to translate technical risk into actionable insight for stakeholders at varying levels of expertise. Success in this role requires the ability to build trust, influence sustainable change, and adapt in a fast-moving environment where strong decisions, collaborative partnership, and risk-based prioritization directly support Schwab’s commitment to integrity, resilience, and client trust.

What you have

Required Qualifications

• 3+ years of demonstrated experience in cybersecurity, information technology, technology audit, or technology risk management
• Understanding of application security and software development life cycle practices, including how related risks are identified, assessed, and managed
• Ability to identify, assess, and prioritize technology and cybersecurity risks using established risk assessment methodologies
• Experience evaluating processes for alignment with published policies, standards, controls, regulatory expectations, and industry best practices
• Ability to communicate complex technical and risk concepts clearly to both technical and executive audiences
• Strong analytical thinking, problem-solving, decision-making, prioritization, influencing, and conflict resolution skills

• Experience developing and reporting cybersecurity metrics to quantify risk reduction and program effectiveness.

• Demonstrated ability to collaborate across functional teams and bring diverse points of view together to drive risk-informed outcomes
• Ability to adapt in an evolving environment while meeting critical commitments under pressure

Preferred Qualifications

• Bachelor’s degree in Business Risk Management, Computer Science, Information Systems, Business Administration, or a related field; equivalent work experience may be considered
• Hands-on risk management or oversight experience in a financial services or highly regulated environment
• Professional certification such as CISSP, CISA, CISM, CRISC, CPCB, or a related credential
• Experience supporting oversight of application security, penetration testing, software development life cycle, or cybersecurity risk management programs
• Experience reviewing and assessing compliance against technology policies, standards, and controls
• Experience developing, analyzing, and reporting metrics to measure risk reduction, control effectiveness, or program performance
• Knowledge of data analysis, reporting, or visualization tools such as Tableau or Power BI
• Experience working with internal auditors, regulators, or senior stakeholders to explain technology risk frameworks, issues, progress, and mitigation strategies

In addition to the salary range, this role is eligible for bonus or incentive opportunities.