Director, STS Risk Services

Your Opportunity

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location.

The Director, IT Risk Services leads the STS Risk Services function driving the maturation and sustainment of the STS
RCSA program by leading the Risk Taxonomy and Facilitation, Risk Champion and Cyber Risk Insights teams, providing
holistic management and execution of the STS RCSA.
This role is responsible for defining and scaling enterprise-consistent risk practices across STS, ensuring alignment to
corporate policy, regulatory expectations, and TRACC governance. The Director drives end-to-end process ownership,
data integrity, and control effectiveness across the MyGRC ecosystem, evolving existing RCSA and issue management
capabilities into a fully integrated, data-driven risk approach.
The role further advances the organization through automation, advanced analytics, and AI-enabled risk insights, enabling
proactive risk identification, improved remediation outcomes, and enhanced executive transparency.

ESSENTIAL DUTIES
The IT Risk Services Director will be responsible for the following duties:
• Lead the central STS Risk Services function inclusive of three teams providing remediation support, analytical
insights and risk advisory services to STS senior management.
• Own and govern STS first-line execution of the STS RCSA ensuring clear lineage between risks, controls, and
issues within MyGRC.
• Define and execute risk enablement strategy using automation, analytics, and AI.
• Implement automated workflows, continuous monitoring, and AI-driven insights ensuring alignment with BLD, AI
governance and model risk standards.
• Establish expectations for issue quality and remediation effectiveness while driving accountability for sustainable
remediation outcomes.
• Deliver integrated STS reporting for risk posture and issue health by building automated dashboards for executive
audiences.
• Develop and maintain strong partnerships across STS Management, Information Security Risk Management,
Business Management, Internal Audit, Sarbanes-Oxley Compliance, and Enterprise Operational Risk
Management.
• Lead and develop a high-performing STS Risk Services organization by fostering a culture of accountability and
innovation.
Other duties include:
• Build strong relationships and partner closely with business and technology partners across Charles Schwab
Corporation and its affiliates.
• May travel minimally as part of training and ongoing program developments and improvements.

What you have

To ensure that we have fulfilled our promise of "challenging the status quo," this role has specific qualifications that successful candidates should have.

Qualifications

• 10+ years of experience in technology risk management or cybersecurity
• Deep expertise in TRACC-aligned processes (RCSA, Issue Management)
• Strong knowledge of NIST, ISO, COBIT frameworks
• Experience with GRC automation and workflow platforms
• Experience with analytics, visualization, and AI/ML use cases
• Understanding of AI governance and model risk principles
• Executive communication and board-level reporting experience
• Ability to influence across complex organizations
• Excellent analytical & technical skills, ability to research problems, diving deeply, when necessary, to determine
root causes and solutions
• Proven ability to design and roll out new business processes and supporting capabilities across multiple
organizational disciplines and technologies
• Bachelor’s degree or equivalent experience
• Certifications (CISSP, CISM, CISA, CRISC) preferred

In addition to the salary range, this role is also eligible for bonus or incentive opportunities