• Establish and maintain governance frameworks, reporting routines, dashboards, and portfolio-level tracking to provide leaders with clear visibility into technology risk and support informed, risk-based decision making.
• Drive the end-to-end coordination of vulnerability management activities, including intake, validation, prioritization, remediation planning, issue tracking, and executive communications.
• Oversee findings and remediation efforts across multiple security and testing channels, including AI-driven application security findings, penetration testing, CodeQL, Black Duck, SAST/DAST, infrastructure configuration reviews, and patchable vulnerabilities.
• Partner with engineering, infrastructure, security, risk, and operational teams to ensure findings are actionable, appropriately prioritized, and addressed through effective remediation strategies.
• Develop reporting and governance processes that improve transparency, accountability, and visibility across the vulnerability lifecycle.
• Use analytical thinking, collaboration, and program management expertise to strengthen Schwab's technology environment, reduce risk exposure, and support continuous improvement initiatives.
• Help advance innovation and operational excellence by enabling consistent execution of technology risk, security, and transformation priorities.

Required Qualifications:

• 5-7 years of experience leading complex technology, cybersecurity, technology risk, resiliency, 5regulatory, or transformation programs across multiple teams and stakeholder groups.
• Demonstrated experience establishing governance, reporting, prioritization, and accountability frameworks for vulnerability management and remediation programs.
• Proven ability to coordinate the intake, validation, triage, assignment, tracking, and resolution of security findings through Jira or similar workflow management platforms.
• Experience partnering across application development, infrastructure, cybersecurity, risk, compliance, and operational teams to deliver enterprise-scale initiatives and measurable business outcomes.
• Demonstrated ability to manage risks, issues, dependencies, resource constraints, and executive-level communications within large, complex programs.
• Strong analytical, problem-solving, and critical-thinking skills with the ability to assess technology risks and recommend practical remediation approaches.
• Excellent written and verbal communication skills, including the ability to translate technical information into clear, concise updates for senior leadership.
• Proven ability to influence cross-functional stakeholders, drive accountability, and achieve results in a highly matrixed environment.

Preferred Qualifications:

• Experience supporting AI adoption programs, AI governance frameworks, AI-driven security testing, emerging technology risk management efforts, and AI-enabled solutions.
• Familiarity with AI-discovered vulnerabilities, risk-based prioritization methodologies, and technology governance best practices.
• Experience driving automation initiatives and engineering productivity improvements at scale using AI and emerging technologies.
• Proven software engineering and application development leadership experience with a strong understanding of modern development frameworks, cloud technologies, DevSecOps, CI/CD, and secure coding practices.
• Familiarity with application security practices and technologies, including CodeQL, Black Duck, Veracode, penetration testing, SAST, DAST, and vulnerability remediation programs.
• Working knowledge of vulnerability management, application security, technology currency, and risk reduction programs within complex enterprise environments.
• Experience leveraging dashboards, reporting tools, and workflow platforms to evaluate vulnerability posture, remediation progress, SLA performance, and risk trends.
• Ability to translate business strategy into technology roadmaps and lead cross-functional teams through large-scale transformation efforts.
• Experience driving process improvement, operational excellence, and continuous improvement initiatives across distributed technology organizations.
• Demonstrated ability to build trusted partnerships and influence decision-making across technology, security, risk, compliance, and business teams.
• Strong executive presence with the ability to communicate complex technology, risk, and remediation topics in a concise, actionable manner.

In addition to the salary range, this role is eligible for bonus or incentive opportunities.

Applicants must be currently authorized to work in the United States on a full-time basis without employer sponsorship.