Senior Manager, Cyber Risk Insights (PL)

Your Opportunity

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

 

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

 

The Senior Manager, Cyber Risk Insights is a People Leader responsible for leading a team that develops, sustains, and continuously matures executive-ready risk insights across STS cyber and technology risk environments. This role oversees metric strategy, key risk indicators, dashboards, analytics practices, data quality, reporting routines, and stakeholder guidance that enable consistent, credible, and risk-informed decision making. The leader will partner across STS leadership, technology and business teams, first- and second-line risk partners, Cybersecurity, Technology Risk Management, and enterprise oversight functions to improve visibility into risk trends, control performance, issue linkages, and areas requiring management attention. The role also supports responsible innovation by safely developing and adopting automation and AI-enabled analytics capabilities through appropriate governance, controls, transparency, human oversight, monitoring, and alignment to enterprise standards.

 

Position Responsibilities:

• Lead, coach, and develop a high-performing team responsible for cyber risk insights, metric development, dashboard delivery, analytics routines, reporting quality, and stakeholder enablement, ensuring clear priorities, effective execution, and continued professional growth.
• Define, maintain, and continuously improve the STS cyber and technology risk insights strategy, including key risk indicators, management reporting, data standards, methodology documentation, and scalable ways of working aligned to enterprise requirements and STS risk management objectives.
• Oversee routines to collect, validate, analyze, and interpret structured and unstructured data to identify key themes, trends, anomalies, emerging risks, control performance indicators, and issue linkages that support timely risk-informed decisions.
• Establish, enhance, and maintain centralized reporting capabilities and executive-ready dashboards that communicate cyber and technology risk posture, metric performance, control quality themes, issue trends, progress against commitments, and areas requiring leadership attention.
• Partner with STS disciplines, metric owners, technology leaders, risk partners, and oversight functions to improve metric quality, data lineage, calculation methodology, evidence support, reporting narratives, and alignment to corporate standards, regulatory expectations, and recognized technology risk frameworks.
• Develop and maintain procedures, templates, decision criteria, operating routines, and quality expectations that support consistent execution of analytics, dashboard publication, risk insight development, metric governance, and ongoing monitoring activities.
• Mature the analytics environment using approved technologies such as SQL, Tableau, Alteryx, automation tools, and other enterprise-enabled capabilities to strengthen reporting reliability, reduce manual effort, and improve scalability.
• Promote the safe adoption of analytics, automation, and AI-enabled capabilities by helping the team and STS partners assess related technology and operational risks, align usage with enterprise governance expectations, and incorporate appropriate controls, transparency, human oversight, validation, and monitoring into reporting practices.
• Build trusted relationships with business, technology, risk, compliance, and audit partners across Charles Schwab Corporation and its affiliates to influence effective risk decisions and drive consistent adoption of cyber risk insight practices.
• Develop and mature internal processes, tools, workflows, automation opportunities, and approved AI capabilities that improve team efficiency, strengthen risk outcomes, reduce manual effort, and support sustainable execution of Cyber Risk Insights responsibilities.
• May travel minimally as part of training and ongoing program developments and improvements.

What you have

Required Qualifications:

• 7+ years of experience in technology risk management, cybersecurity risk, operational risk, audit, compliance, data analytics, reporting, or related first- or second-line risk disciplines, with demonstrated experience leading complex risk programs, analytics capabilities, or governance routines.
• 3+ years of people leadership experience, including coaching, performance management, prioritization, workload management, and development of risk or analytics professionals in a matrixed environment.
• Strong understanding of technology risk, cybersecurity risk, control design, control evaluation, key risk indicators, metric governance, and industry frameworks such as NIST, ISO, COBIT, and other relevant standards used to assess technology and cybersecurity control environments.
• Broad understanding of enterprise technology environments, cybersecurity practices, data considerations, third-party dependencies, emerging technologies, and related risk implications in a large-scale financial services environment.
• Demonstrated ability to influence, negotiate, and align priorities across first-line technology teams, second-line oversight functions, audit partners, and senior stakeholders while maintaining risk discipline and constructive partnership.
• Experience developing risk metrics, quality indicators, executive dashboards, reporting narratives, and insights that clearly communicate control performance, program health, risk trends, issue linkages, and management actions.
• Strong analytical and problem-solving skills, with the ability to assess complex risk and control issues, identify root causes, evaluate alternatives, and translate findings into practical recommendations and measurable improvements.
• Proven ability to design, implement, and sustain scalable business processes, governance routines, reporting capabilities, and supporting tools across multiple technology, risk, analytics, and business disciplines.
• Experience owning or materially contributing to metric methodology, reporting standards, dashboard controls, data quality expectations, calculation documentation, quality assurance routines, and program procedures.
• Ability to translate business, technology, and risk needs into clear requirements, operating procedures, reporting capabilities, and practical solutions that support consistent risk management execution.
• Self-directed leader who can operate independently, lead through ambiguity, manage competing priorities, facilitate cross-functional working groups, and drive outcomes through others.
• Demonstrated ownership mindset, sound judgment, accountability, and commitment to delivering high-quality risk outcomes in a complex, fast-paced environment.
• Experience supporting responsible innovation or AI-enabled analytics and reporting changes through risk assessment, governance alignment, control identification, data handling expectations, validation, monitoring, and human oversight.
• Bachelor’s degree in technology, cybersecurity, data analytics, risk management, business, or a related field.
• Relevant certifications such as CISSP, CISM, CISA, CRISC, CGEIT, or other technology risk, cybersecurity, audit, data, analytics, or governance credentials are a plus.

In addition to the salary range, this role is also eligible for bonus or incentive opportunities.