What are the responsibilities and job description for the Senior Manager, Technology Risk Management position at Charles Schwab?
Your opportunity
At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.
Technology Risk Management (TRM) is part of the Corporate Risk Management (CRM) department that forms the second line of defense at Charles Schwab. TRM provides challenge with partnership for the firm’s information technology, security, and resilience practices to manage risks to Confidentiality, Integrity, Availability, and Value Delivery within the Firm’s Risk Appetite. Within TRM, the Infrastructure Vulnerabilities Risk Management (IVRM) team assesses, monitors, measures, and reports on technical risks related to infrastructure vulnerabilities.
Reporting to the Director, IVRM, this Senior Manager role is an individual contributor who has an innate curiosity in understanding the people, process, and technology behind Schwab’s vulnerability management space. This individual should possess the ability to analyze complex data sets and leverage the insights gleaned from data to formulate risk narratives as to the firm’s infrastructure security risk posture. It is also the expectation that the individual will establish strong relationships with our stakeholders by building trust through their subject matter expertise and integrity of their work to influence call to action, as needed, to drive sustainable change. Other core body of work includes but is not limited to creation of metrics; providing requirements to the data engineering and visualization teams; assessing technology impacts to our source of data; validating the remediation of vulnerabilities-related issues; challenging effectiveness and design of controls; reviewing policies/standards for comprehensive coverage; and delivering thematic analysis, trending, and risk-based insights for presentation to senior management, risk committees, the Board, and regulators.
What you have
To ensure that we fulfill our promise of “challenging the status quo,” this role has specific qualifications that successful candidates should have.
Required Qualifications
At Schwab, we’re committed to empowering our employees’ personal and professional success. Our purpose-driven, supportive culture, and focus on your development means you’ll get the tools you need to make a positive difference in the finance industry. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.
We offer a competitive benefits package that takes care of the whole you – both today and in the future:
At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.
Technology Risk Management (TRM) is part of the Corporate Risk Management (CRM) department that forms the second line of defense at Charles Schwab. TRM provides challenge with partnership for the firm’s information technology, security, and resilience practices to manage risks to Confidentiality, Integrity, Availability, and Value Delivery within the Firm’s Risk Appetite. Within TRM, the Infrastructure Vulnerabilities Risk Management (IVRM) team assesses, monitors, measures, and reports on technical risks related to infrastructure vulnerabilities.
Reporting to the Director, IVRM, this Senior Manager role is an individual contributor who has an innate curiosity in understanding the people, process, and technology behind Schwab’s vulnerability management space. This individual should possess the ability to analyze complex data sets and leverage the insights gleaned from data to formulate risk narratives as to the firm’s infrastructure security risk posture. It is also the expectation that the individual will establish strong relationships with our stakeholders by building trust through their subject matter expertise and integrity of their work to influence call to action, as needed, to drive sustainable change. Other core body of work includes but is not limited to creation of metrics; providing requirements to the data engineering and visualization teams; assessing technology impacts to our source of data; validating the remediation of vulnerabilities-related issues; challenging effectiveness and design of controls; reviewing policies/standards for comprehensive coverage; and delivering thematic analysis, trending, and risk-based insights for presentation to senior management, risk committees, the Board, and regulators.
What you have
To ensure that we fulfill our promise of “challenging the status quo,” this role has specific qualifications that successful candidates should have.
Required Qualifications
- 5 years’ demonstratable experience in either data analytics, risk management, cybersecurity, or technology audit
- Ability to identify, assess, and prioritize potential risk
- Understanding of risk assessment methodologies
- Bachelor’s degree plus CISSP, CISM, CISA, CISM, CRISC, or equivalent certification (data analytics, business intelligence, etc.) preferred
- Experience in financial services industry preferred
- Experience with reviewing and assessing compliance against cybersecurity policies, standards, and controls
- A firm understanding of and risk management experience with infrastructure vulnerability and remediation
- Experience with data analysis and reporting
- Ability to effectively communicate with technical and executive audiences, both oral and written
- Strong interpersonal, analytical, problem-solving, influencing, prioritization, decision-making and conflict resolution skills
- Experience working with partners at all levels and across functional lines, bringing diverse points of view together
- Ability to thrive in a constantly evolving environment and meet critical commitments under pressure
- Comfortable with data analytics and visualization tools (e.g. SQL, Tableau, Alteryx, Power BI, BigQuery
At Schwab, we’re committed to empowering our employees’ personal and professional success. Our purpose-driven, supportive culture, and focus on your development means you’ll get the tools you need to make a positive difference in the finance industry. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.
We offer a competitive benefits package that takes care of the whole you – both today and in the future:
- 401(k) with company match and Employee stock purchase plan
- Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
- Paid parental leave and family building benefits
- Tuition reimbursement
- Health, dental, and vision insurance
