Salary: USD $90,900 - $115,000 / Year

Your opportunity

The Schwab STS Risk Services Manager is responsible for driving the maturation and sustainment of the STS Risk Management program with particular focus on developing standardized practitioner processes, quality management and governance routines to enable effective Risk and Control Self-Assessment (RCSA) execution. Key responsibilities include proactive management of STS sub-organization Business Self-Identified Issues and Control Portfolio, maintenance of team guidance documents, development and implementation of team QA standards and relevant reporting as well as providing guidance and support to stakeholders. The ability to effectively partner with all levels of management, oversight areas and peers as well as experience with technology risk management, risk and controls, RCSA program participation or governance required. This is an individual contributor role.

• Maintain the MyGRC STS RCSA Process, Risk and Controls Catalog commensurate with corporate requirements and identifying areas for standardization with lineage to industry framework requirements
• Lead development of program best practices and guidance as prioritized by our stakeholders
• Proactively identify controls requiring attention or strengthening and work collaboratively with other STS disciplines to implement improvements in line with corporate standards, applicable regulations, and/or best practice frameworks
• Develop and maintain procedures in support of key RCSA and Issue Management processes
• Establish and monitor centralized reporting capabilities and results in support of STS Risk Services internal processes
• Develop and maintain strong partnerships across the Risk Champion community, STS Management, Information Security Risk Management, Business Management, Internal Audit, Sarbanes-Oxley Compliance, and Enterprise Operational Risk Management

• Build strong relationships and partner closely with business and technology partners across Charles Schwab Corporation and its affiliates
• Develop internal processes and tools to increase team efficiencies and continually mature operations

• 3+ years' experience in technology, cybersecurity, or technology risk management disciplines
• Expertise in technology risk and controls, industry best practices and applicable frameworks such as NIST, ISO and COBIT
• Broad understanding of technology best practices in an enterprise setting
• Ability to drive collaboration and negotiation across multiple business and technology disciplines spanning both the first and second lines of defense
• Experience in developing performance or risk metrics, and executive dashboards
• Excellent analytical & technical skills, ability to research problems, diving deeply, when necessary, to determine root causes and solutions
• Proven ability to design and rollout new business processes and supporting capabilities across multiple organizational disciplines and technologies
• Coordination and documentation of core RCSA practice guidance documents
• Ability to translate business needs into technical requirements, and then implement
• Must be a self-starter and able to work independently, as part of a team, and lead working groups as required
• Work ethic based on a strong desire to exceed expectations
• Bachelor's Degree in Computer Science or related discipline or commensurate industry experience
• Industry certifications such as CISSP, CISM, CISA, or CRISC a plus

• 401(k) with company match and Employee stock purchase plan
• Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
• Paid parental leave and family building benefits
• Tuition reimbursement
• Health, dental, and vision insurance