Risk Manager - Application Development Security

Your Opportunity

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together. We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

 

Technology Risk Management (TRM), part of Corporate Risk Management (CRM), partners with technology and business teams to identify, assess, and manage risks associated with emerging technologies and critical business processes. This work helps ensure alignment with the firm's risk appetite while protecting client assets, client information, and Schwab’s operational environment.

 

As a Senior Manager, Technology Risk Management, you will play a critical role in protecting Schwab’s technology ecosystem by partnering with Corporate Risk Management, technology, security, and business teams to identify, assess, monitor, and mitigate technology risk. As a senior individual contributor within Technology Risk Management, you will provide independent oversight of enterprise technology and architecture governance processes, helping ensure technology initiatives align with the firm's risk appetite, regulatory requirements, and operational resilience objectives. 

 

In this Technology Architecture Governance Risk (TAGR) role, you will influence enterprise-wide governance outcomes by evaluating the effectiveness of architecture governance frameworks, assessing compliance with technology policies, standards, and controls, and driving improvements that strengthen risk management practices. You will leverage analytical thinking, sound judgment, and risk expertise to conduct risk assessments, develop meaningful metrics and reporting, and provide insights that support executive decision-making. Success requires the ability to navigate complex environments, analyze emerging risks, balance competing priorities, and build trusted partnerships across technology, risk, audit, security, and business functions.

 

In this Technology Architecture Governance Risk (TAGR) role, you will evaluate the effectiveness of enterprise-wide governance frameworks, evaluate risks across the technology and architecture governance solutions to assess responsible deployment and in compliance with internal standards and applicable regulatory requirements. You will assess risks associated with traditional and emerging technologies while helping stakeholders understand complex risk considerations and make informed decisions. Success requires the ability to synthesize complex information, provide strategic risk insights, challenge assumptions, and influence action across a diverse group of partners and leaders.

 

You will help shape strategic and tactical initiatives that enhance governance, operational resilience, and risk transparency while supporting compliance with industry regulations and evolving technology standards. This position offers the opportunity to influence sustainable change, strengthen enterprise risk capabilities, and help ensure the security, reliability, and resilience of Schwab’s technology landscape.

What you have

Required Qualifications

• 5+ years of experience in technology operations, technology risk management, information security, governance, compliance, audit, or a related discipline.
• Experience assessing or overseeing enterprise architecture, technology governance, technology controls, or related risk management processes.
• Experience developing risk reporting, metrics, dashboards, or executive-level governance materials.
• Experience developing and delivering risk reporting, metrics, analyses, or executive-level presentations that support decision-making.
• Working knowledge of technology risk management frameworks and industry standards, including NIST, COBIT, FFIEC, or similar guidance.
• Understanding of applicable regulatory, compliance, and legal requirements, including GDPR, PCI, FFIEC, GLBA, SOX, or comparable regulations.
• Demonstrated ability to identify, assess, prioritize, and communicate technology and operational risks through data-driven analysis and strategic recommendations.
• Strong analytical, problem-solving, critical thinking, and decision-making skills.
• Experience influencing stakeholders, collaborating effectively, and driving outcomes across multiple business functions, including technology, security, risk, compliance, and audit teams.
• Excellent written and verbal communication skills with the ability to translate complex technical concepts for both technical and executive audiences.
• Experience managing multiple priorities and delivering results in a fast-paced, highly regulated environment.
• Ability to work independently and proactively with minimal direction.
• Bachelor’s degree in Business Risk Management, Computer Science, Information Systems, Business Administration, or a related field, or equivalent combination of education and experience.

Preferred Qualifications

• Experience providing technology risk management oversight within financial services or another highly regulated industry.
• Experience assessing compliance with technology policies, standards, controls, and governance requirements.
• Experience supporting operational resilience, cyber risk, incident management, or risk mitigation programs.
• Knowledge of enterprise architecture governance practices, architecture review processes, and technology lifecycle management.
• Experience of data analysis, reporting, and visualization tools such as Tableau, Power BI, or similar platforms.
• Professional certifications such as CISSP, CISA, CISM, CRISC, CPCB, or equivalent credentials.
• Advanced degree in a relevant discipline.

In addition to the salary range, this role is eligible for bonus or incentive opportunities.