Senior Technology Risk Manager

Your Opportunity

At Schwab, you're empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us "challenge the status quo" and transform the finance industry tog

The Schwab Cybersecurity Services (SCS) organization is a centralized Center of Excellence (COE) that provides security services to advance Schwab's security posture and enhance the protection of Schwab's critical assets.

In this role you will be a key player for 3rd Party Cyber Risk Management activities. You will conduct cybersecurity and technology risk assessments on third parties that Schwab business relies on to deliver exceptional services to our clients.

You will quantify risk in alignment with Schwab's operational risk program requirements and work directly with third parties and contract owners to identify methods of mitigating those risks.

Additionally, you may be involved in negotiating security terms and conditions with third parties, acting as subject matter experts in coordination with legal and procurement functions.

Sr. Managers on the team may also be tasked with executing Schwab's third-party incident playbook including threat hunting.

The 3rd Cyber Risk Management team is responsive to changes in the threat environment and regulatory expectations. Sr. Managers are responsible for taking an active role in program review and enhancement.

As a senior team member, you will represent SCS across the firm and act as a subject matter expert on all topics regarding 3rd party cybersecurity.

What you have

Required qualifications :

• 5+ years' experience in 3rd party management, audit, oversight, SOX testing, operational risk management, or similar role
• 5+ years in a role using independent critical thinking skills, preferably developed through risk assessments
• 5+ years demonstrating knowledge of 3rd party management, internal controls, financial / banking regulations and risk assessment and mitigation
• 5+ years experience doing contract reviews

Preferred qualifications :

• 4 year degree preferred, especially with a technology or security specialization.
• One or more of the following certifications preferred : CISM, CISSP, CCSP, CRISC, CISA
• Project management skills with ability to work independently and with a team, prioritize and manage multiple projects and succeed in a fast-paced, heavy workload environment
• Strong written and verbal communication skills with a proven track record of building effective working relationships with internal and external business partners and senior leaders
• Experience with one or more of the following tools : ProcessUnity, Ariba Risk, Recorded Future, Risk Recon, OpenPages, etc.
14 days ago