Your OpportunityAs Schwab continues to expand its technology footprint across cloud, artificial intelligence, digital platforms, applications & APIs, and infrastructure services, the Technology Risk Management (TRM) team plays a critical role in helping ensure the company maintains a strong risk posture through independent oversight and risk-informed assurance activities.
TRM has an opening in the Cyber Threat & Insider Risk discipline for an individual contributor to serve as the primary subject matter expert for second line oversight, effective challenge, and risk reporting of Security Operations, Digital Forensics, and Incident Response capabilities, processes, and controls. More specifically, this role reviews risks and control activities over cyber detection, monitoring, investigation, containment, and response. You will assess control effectiveness, identify systemic weaknesses, and ensure alignment with enterprise policies and standards, regulatory expectations, and industry best practices. You will review and challenge issue identification, closure, risk acceptances related to risks in your domain. You will maintain visibility into the firm's emerging threats and implementation of AI technologies and influence the implementation of expected monitoring, investigation, and response control activities. Success requires a self-starter attitude, strong desire to learn, building collaborative relationships with business partners, and the ability to assess and communicate technical risk clearly to executive, committee, regulatory, and technical audiences.
Please note: This position is Monday through Friday during standard business hours and follows a hybrid work model with four days in the office and one day working from home. The role is available only in Indianapolis, IN; Omaha, NE; Austin, TX and Southlake, TX (DFW). Candidates must reside in or be willing to relocate at their own expense to one of the listed locations.
Applicants must be currently authorized to work in the United States on a full-time basis without employer sponsorship.
What you have
To ensure that we have fulfilled our promise of "challenging the status quo," this role has specific qualifications that successful candidates should have.
Required qualifications:
- 5+ years of experience in Risk Management, Cybersecurity, or Internal Audit
- Demonstrated Risk Assessment, Risk Identification, and Risk Prioritization experience
- Ability to apply Analytical Thinking and Problem Solving to complex technology risk information
- Strong Communication skills with the ability to present clear conclusions to technical and executive audiences
- Demonstrated Collaboration and Stakeholder Management Influence skills across multiple functions and organizational levels
Preferred qualifications:
- Bachelor’s degree
- CISSP, CISM, CISA, CRISC, or an equivalent technology risk, cybersecurity, audit certification
- Experience identifying and assessing risks associated with security operations, digital forensics, and/or cybersecurity incident response
- Financial services industry experience
- Demonstrated Self-Starter, Influencing Others, and Building Collaborative Relationship competencies in an evolving environment
In addition to the salary range, this role is also eligible for bonus or incentive opportunities
