Tech Currency and AI Cyber Risk Manager

Your Opportunity

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us challenge the status quo and transform the finance industry together.

 

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

 

Schwab Technology Services (STS) enables the future of how clients manage their money by delivering innovative, reliable technology products and services that support our commitment to democratizing access to investing and financial planning.

 

This role offers the opportunity to lead highly visible technology risk, cybersecurity, and transformation initiatives that directly influence the security, resiliency, and operational excellence of critical technology platforms across the firm.

 

As a strategic program leader, you will drive coordination and execution across technology risk, tech currency, cyber risk, AI adoption, and enterprise transformation priorities within the Technology Currency and Cyber Risk (CTET) space. You will help accelerate responsible AI innovation by supporting governance, adoption, reporting, and execution efforts, while partnering with engineering, application, infrastructure, security, risk, and operational teams to translate complex findings into actionable outcomes.

 

Your ability to build alignment across stakeholders, manage competing priorities, and drive accountability will help ensure timely remediation of vulnerabilities, measurable progress against strategic objectives, and transparency across the technology risk lifecycle.

 

 

Responsibilities include:

 

• Establish and maintain governance frameworks, reporting routines, dashboards, and portfolio-level tracking to provide leaders with clear visibility into technology risk and support informed, risk-based decision making.
• Drive the end-to-end coordination of vulnerability management activities, including intake, validation, prioritization, remediation planning, issue tracking, and executive communications.
• Oversee findings and remediation efforts across multiple security and testing channels, including AI-driven application security findings, penetration testing, CodeQL, Black Duck, SAST/DAST, infrastructure configuration reviews, and patchable vulnerabilities.
• Partner with engineering, infrastructure, security, risk, and operational teams to ensure findings are actionable, appropriately prioritized, and addressed through effective remediation strategies.
• Develop reporting and governance processes that improve transparency, accountability, and visibility across the vulnerability lifecycle.
• Use analytical thinking, collaboration, and program management expertise to strengthen Schwab's technology environment, reduce risk exposure, and support continuous improvement initiatives.
• Help advance innovation and operational excellence by enabling consistent execution of technology risk, security, and transformation priorities.

What you have

Required Qualifications:

 

 

• 5-7 years of experience leading complex technology, cybersecurity, technology risk, resiliency, 5regulatory, or transformation programs across multiple teams and stakeholder groups.
• Demonstrated experience establishing governance, reporting, prioritization, and accountability frameworks for vulnerability management and remediation programs.
• Proven ability to coordinate the intake, validation, triage, assignment, tracking, and resolution of security findings through Jira or similar workflow management platforms.
• Experience partnering across application development, infrastructure, cybersecurity, risk, compliance, and operational teams to deliver enterprise-scale initiatives and measurable business outcomes.
• Demonstrated ability to manage risks, issues, dependencies, resource constraints, and executive-level communications within large, complex programs.
• Strong analytical, problem-solving, and critical-thinking skills with the ability to assess technology risks and recommend practical remediation approaches.
• Excellent written and verbal communication skills, including the ability to translate technical information into clear, concise updates for senior leadership.
• Proven ability to influence cross-functional stakeholders, drive accountability, and achieve results in a highly matrixed environment.

 

 

Preferred Qualifications:

 

 

• Experience supporting AI adoption programs, AI governance frameworks, AI-driven security testing, emerging technology risk management efforts, and AI-enabled solutions.
• Familiarity with AI-discovered vulnerabilities, risk-based prioritization methodologies, and technology governance best practices.
• Experience driving automation initiatives and engineering productivity improvements at scale using AI and emerging technologies.
• Proven software engineering and application development leadership experience with a strong understanding of modern development frameworks, cloud technologies, DevSecOps, CI/CD, and secure coding practices.
• Familiarity with application security practices and technologies, including CodeQL, Black Duck, Veracode, penetration testing, SAST, DAST, and vulnerability remediation programs.
• Working knowledge of vulnerability management, application security, technology currency, and risk reduction programs within complex enterprise environments.
• Experience leveraging dashboards, reporting tools, and workflow platforms to evaluate vulnerability posture, remediation progress, SLA performance, and risk trends.
• Ability to translate business strategy into technology roadmaps and lead cross-functional teams through large-scale transformation efforts.
• Experience driving process improvement, operational excellence, and continuous improvement initiatives across distributed technology organizations.
• Demonstrated ability to build trusted partnerships and influence decision-making across technology, security, risk, compliance, and business teams.
• Strong executive presence with the ability to communicate complex technology, risk, and remediation topics in a concise, actionable manner.

 

In addition to the salary range, this role is eligible for bonus or incentive opportunities.

 

Applicants must be currently authorized to work in the United States on a full-time basis without employer sponsorship.