Director, Business-Led Development and AI Development Lifecycle Oversight

Your Opportunity

Schwab remains committed to providing increased visibility to career growth opportunities and job requirements. This posting announcement is part of increased transparency and while all qualified applicants will be reviewed and considered, this organization has a preferred candidate identified for this role.

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location.

The Technology Risk Management (TRM) Organization provides Second Line of Defense oversight of the Firm’s technology, information security, data, and operational resilience risks. Reporting to the Managing Director, Information Technology Risk Management, this leader partners across the Firm and delivers results through a team of directors, managers, and specialists.

This Director, People Leader role leads a new team that oversees how employees use AI tools, including third-party models such as Copilot, and the business-led development (BLD) solutions employees build for their own work. The team also sets strategy, coordinates and supports AI solutions that TRM builds for its own use, including managing the department’s AI solutions through the Firm’s AI governance processes.

Oversight Mandate & Risk Framework

• Own TRM’s oversight mandate for employee AI use and BLD and set clear scope and expectations for second-line review.
• Build and execute a risk management oversight framework that gives the Firm visibility into business developed AI and BLD risk and maps it to existing risk categories and controls.
• Provide challenge and oversight of policies, standards, and risk and controls fall within oversight scope, and identify potential gaps in the Firm’s execution of policies, standards and controls.
• Provide challenge on lifecycle requirements, data protection, access, and “shadow AI” safeguards owned by business unit and governance partners.
• Track regulatory expectations and industry practice and adjust oversight approaches to match.

Risk Monitoring, Assessment & Reporting

• Establish a recurring risk monitoring cadence that combines tool outputs with BLD solution lifecycle tracking.
• Assess AI and BLD risk exposure, and escalate key risks to TRM leadership promptly, supported by evidence.
• Brief governance committees, including the Information Security and Technology Subcommittee (ISTS), on the Firm’s AI and BLD risk posture.

Partnership, Coordination & Influence

• Build strong working relationships with the senior AI governance, technology, information security, data, and business-unit leaders who own AI and BLD governance and controls.
• Identify opportunities to enable business unit use of AI and BLD within the Firm’s policies and standards to limit friction and enable agile business unit response to the evolving AI landscape.
• Engage early projects and strategic initiatives to ensure Risk Management considerations are addressed early and business units can maintain speed to market.
• Coordinate with TRM teams, Corporate Risk Management (CRM), and enterprise AI oversight partners, so the business receives a consistent risk message.
• Represent TRM in CRM AI oversight reporting.

TRM AI Solution Enablement

• Coordinate and support TRM-developed AI solutions from intake through deployment, aligning solution owners, partners, and timelines.
• Prioritize the solution pipeline and report measurable efficiency and quality gains.
• Hold TRM-built solutions to the same lifecycle and monitoring standards TRM expects of the rest of the Firm.
• Grow AI fluency across TRM and CRM through defined enablement services and training.

People Leadership & Team Development

• Build and lead a high-performing team. Develop leaders and skills, and build a culture of accountability, collaboration, and continuous improvement.

What you have

To ensure that we have fulfilled our promise of "challenging the status quo," this role has specific qualifications that successful candidates should have.

Required Qualifications

• 10+ years of risk management experience, including required experience in technology risk management and cybersecurity, and a track record of leading teams.
• Bachelor’s degree required; advanced degree preferred.
• Relevant professional certifications preferred, such as CISSP, CISA, CRISC, or PMP.
• Experience building risk oversight frameworks and operating models from scratch, including defining expectations, ownership, and repeatable processes.
• Strong governance experience, including committee support, policy and standards alignment, and reporting to senior leadership and governance bodies.
• Ability to set direction, delegate effectively, and build and develop strong teams.
• Comfort working across a matrixed organization, building relationships and influencing senior leaders without direct authority.
• Working knowledge of AI and BLD risks, including data protection, model use, and familiarity with emerging regulatory expectations and industry practice.
• Experience using data, automation, and AI-enabled tools to improve how risk work gets done.
• Clear executive communication, including the ability to distill complex risk topics into concise reporting that leaders can act on.
• Sound judgment on when and how to escalate and comfort making decisions amid ambiguity and rapid change.

In addition to the salary range, this role is also eligible for bonus or incentive opportunities