Head of Technology Risk Management Strategy & Operations (PL)

Your Opportunity

Schwab remains committed to providing increased visibility to career growth opportunities and job requirements. This posting announcement is part of increased transparency and while all qualified applicants will be reviewed and considered, this organization has a preferred candidate identified for this role.

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location.

The Strategy & Operations team within Technology Risk Management (TRM) focuses on enabling effective oversight through governance, policy maintenance, risk identification, risk monitoring and reporting practices, and supporting departmental, audit, and regulatory needs. TRM oversight covers data, information security, information technology, and operational resilience risk.

As Head of TRM Strategy & Operations, you'll set the strategic direction for the department's risk programs, governance, and reporting. You'll be a trusted advisor to TRM leadership, Enterprise Risk Management, Internal Audit, and First Line Business Partners. You'll also shape how technology risk is communicated to senior management and the Board.

What You'll Do

• Define the strategy and objectives for the TRM Strategy & Operations team so they align with departmental priorities and the Firm's risk appetite. Keep programs maturing as regulatory expectations and industry practices evolve.
• Build and lead a high-performing team. Develop leaders and skills, and build a culture of accountability, collaboration, and continuous improvement.
• Lead risk assessment and reporting. Deliver an integrated view of technology risk across data, information security, IT, and operational resilience through the Quarterly Risk Assessment, Aggregate Risk Report, and Annual Technology Risk Assessments.
• Advise senior leadership and the Board. Turn complex risk insights into clear, decision-ready messaging for BRC, OROC, ISTS, and executive leadership.
• Serve as ISTS Secretary. Manage the committee charter, agendas, and meeting minutes so the forum runs effectively and its governance records are complete.
• Steward TRM's resources and capabilities. Support the TRM senior leadership team’s management of the department's budget, vendor partnerships, and training strategy, investing where it matters most so TRM has the capacity and expertise to deliver on its priorities.
• Steer TRM's governance framework. Confirm TRM Strategy & Operations programs align with ERM requirements and that oversight practices stay consistent, inclusive but not limited to policies and standards, issues management, risk assessment, RCSA oversight, and thematic testing programs
• Lead regulatory and Internal Audit engagements. Serve as TRM's strategic point of contact for the FRB and IAD, and confirm engagements are well coordinated and well supported.
• Partner across the enterprise. Work with TRM leadership, ERM, CRM, and first-line partners to align priorities, provide constructive challenge, and balance competing demands.
• Drive clear, consistent communication across TRM. Manage how Strategy & Operations shares priorities, program updates, and changes with the department so teams stay informed, aligned, and able to act.

What you have

To ensure that we have fulfilled our promise of "challenging the status quo," this role has specific qualifications that successful candidates should have.

Required Qualifications

• 10+ years of experience in technology risk or enterprise/operational risk in financial services
• Bachelor’s degree in computer systems, Business, Risk Management, or a related field
• Strong executive presence, with the ability to make complex topics clear and concise
• Proven people leader who has built and developed high-performing risk teams
• Experience designing and implementing risk programs, such as risk assessment, issues management, and RCSA
• Working knowledge of control frameworks such as NIST, ISO, and COBIT, and of Enterprise Risk Management framework requirements
• Experience supporting regulatory exams and Internal Audit engagements
• Track record of producing Board- and committee-level risk reporting
• Experience applying AI and automation to risk management processes
• Relevant certifications such as CRISC, CDPSE, CISA, or CISSP

In addition to the salary range, this role is also eligible for bonus or incentive opportunities