At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.
Technology Risk Management (TRM) is part of the Corporate Risk Management (CRM) department that forms the second line of defense at Charles Schwab. TRM provides challenge with partnership for the firm’s information technology, security, and resilience practices to manage risks to Confidentiality, Integrity, Availability, and Value Delivery within the Firm’s Risk Appetite. Within TRM, the Infrastructure Vulnerabilities Risk Management (IVRM) team assesses, monitors, measures, and reports on technical risks related to infrastructure vulnerabilities.
Reporting to the Director, IVRM, this Senior Manager role is an individual contributor who has an innate curiosity in understanding the people, process, and technology behind Schwab’s vulnerability management space. This individual should possess the ability to analyze complex data sets and leverage the insights gleaned from data to formulate risk narratives as to the firm’s infrastructure security risk posture. It is also the expectation that the individual will establish strong relationships with our stakeholders by building trust through their subject matter expertise and integrity of their work to influence call to action, as needed, to drive sustainable change. Other core body of work includes but is not limited to creation of metrics; providing requirements to the data engineering and visualization teams; assessing technology impacts to our source of data; validating the remediation of vulnerabilities-related issues; challenging effectiveness and design of controls; reviewing policies/standards for comprehensive coverage; and delivering thematic analysis, trending, and risk-based insights for presentation to senior management, risk committees, the Board, and regulators.
What you haveTo ensure that we fulfill our promise of “challenging the status quo,” this role has specific qualifications that successful candidates should have.
Required Qualifications:
5+ years of demonstratable experience in either cybersecurity, technology audit, or technology risk management requiredAbility to identify, assess, and prioritize potential riskUnderstanding of risk assessment methodologiesBachelor’s degree
Preferred Qualifications:
Experience in financial services industry preferredCISSP, CISM, CISA, CRISC, or equivalent certification preferredExperience with reviewing and assessing compliance against cybersecurity policies, standards, and controlsA firm understanding of and risk management experience with infrastructure vulnerability and remediationExperience with data analysis and reportingAbility to effectively communicate with technical and executive audiences, both oral and writtenStrong interpersonal, analytical, problem-solving, influencing, prioritization, decision-making and conflict resolution skillsExperience working with partners at all levels and across functional lines, bringing diverse points of view togetherAbility to thrive in a constantly evolving environment and meet critical commitments under pressure Options Apply for this jobApplyShareRefer a friendRefer Sorry the Share function is not working properly at this moment. Please refresh the page and try again later. Share on your newsfeed Why work for us?Own Your Tomorrow embodies everything we do! We are committed to helping our employees ignite their potential and achieve their dreams. Our employees get to play a central role in reinventing a multi-trillion-dollar industry, creating a better, more modern way to build and manage wealth.
Benefits: A competitive and flexible package designed to empower you for today and tomorrow. We offer a competitive and flexible package designed to help you make the most of your life at work and at home—today and in the future. Application FAQs
Software Powered by iCIMS
www.icims.com