Director Security Development & Engineering Principal

Your Opportunity

• Most Schwabbies have the opportunity to work in the office and/or at home based on their preference
• Employees may have the flexibility for a hybrid schedule, where they divide their time between working remotely or in the office.
• Employees and managers can discuss additional flexibility options based on their role, business needs, and individual circumstances.

• Lead improvement projects to facilitate innovation, team productivity, and enhanced technology architecture governance and IT management framework risk practices, processes and procedures
• Lead the development and execution of standardized processes to continually analyze emerging technology risks and synthesize into "emerging risk advisories" that are then integrated into Firm-wide processes
• Oversee first line of defense execution of technology architecture and enterprise IT governance framework processes and establish practices to measure and monitor control design effectiveness on an ongoing basis
• Analyze data in systems-of-record and produce insights/reports to support technology architecture and enterprise IT governance oversight activities
• Assist the Managing Director, Technology Architecture Governance in ensuring the Technology Architecture Governance Risk strategy reflects business and regulatory drivers without affecting operational efficiency
• Develop and deliver executive-level reporting and presentations outlining technology architecture governance and status of defined action plans
• Lead and manage TAGR team-focused continuous improvements including enhancement to risk assessment processes, leadership reporting activities, development and maintenance of online information portals, and audit and/or regulatory projects
• Contribute to the creation and development of key risk indicators metrics and ongoing risk monitoring within architecture and IT governance scope
• Improve and maintain technology governance-related risk assessment maturity through the development of standard processes, procedures, and work instructions
• Advocate and promote awareness of technology architecture and IT management framework risks among business and technical partners
• Perform proactive management of findings by working with appropriate teams to develop remediation action plans, track progress, and facilitate risk treatment actions (exception or risk acceptance)
• Mentor TAGR team members in developing their knowledge and command of technology and security architecture standard processes and IT management framework risk management field
• Lead the evaluation of new and proposed updates to existing Schwab policies, standards, and procedures to reflect Technology Architecture Governance Risk considerations and requirements, as appropriate
• Review, oversee and propose modification or addition as required to RCSA controls applicable to Technology Architecture Governance Risk
• Lead multi-functional, cooperative efforts among members of technology architecture and IT management framework project teams and build relationships with key contacts outside own area of expertise
• Assist in the management of responses to Technology Architecture Governance Risk-related audit and regulatory inquiries
• Assist in the management of responses to Technology Architecture Governance Risk-related inquiries from Charles Schwab leadership, businesses, subsidiaries, teams, and partners
• Additional projects and tasks may be included based on business needs and the regulatory environment

• Build strong relationships and partner closely with business and technology partners across Charles Schwab Corporation and its affiliates
• Develop internal processes and tools to increase team efficiencies and continually mature operations
• May travel minimally as part of training and ongoing program developments and improvements

• 10+ years in Information Security, Risk Management, or Information Technology disciplines
• Good understanding of information and technology standards and frameworks for the governance and management of enterprise information and technology, including COBIT,
• IT Service Management (ITSM), ITIL, Capability Maturity Model Integration (CMMI), ISO/IEC 20000, etc.
• Good understanding of legal and regulatory compliance standards and requirements against data and IT, including GDPR, FFIEC, GLBA, Payment Card Industry Data Security
• Standard (PCIDSS), SOX, NIST CSF & NIST 800-53 r4/5, COBIT, and ISO.
• Proficient knowledge of hardware/software architecture and domains in technology planning, build, deploy, and operations with a focus on governance, risk, and compliance.
• Experience working multi-functionally to oversee technology governance processes and procedures that assure approved technology solutions adhere to Schwab technology
• and security policies and standards, reference architectures/architectural design principles and other required internal/external (e.g., audit & regulatory) standards.
• Superior attention to detail and focus on quality work delivery
• Expertise in information security standard processes and technology risk management discipline
• Working knowledge of workstation, server and mobile architectures, OS and applications
• Working knowledge of and experience with cloud computing technologies and standard processes
• Working knowledge of software development practices and technologies, Agile, DevOps and CI/CD
• Experience in developing performance or risk metrics, and executive dashboards
• Excellent analytical & technical skills, able to research problems, diving deeply when necessary, to determine root causes and solutions
• Experience querying data sources (e.g., MS-SQL, Oracle) and producing insightful reports and visualizations (e.g., Tableau) preferred
• Must be a self-starter and able to work independently, as part of a team, and lead working groups as required
• Work ethic based on a strong desire to exceed expectations.
• Ability to work successfully in a very fast-paced, results-oriented environment. Requires excellent time management skills, ability to appropriately prioritize multiple, competing demands.
• Ability to translate business needs into business requirements, and then implement
• Ability to effectively communicate with technical and executive audiences, both oral and written is required
• Experience working with auditors in support of audits and external regulatory exam processes is required
• Experience in gathering requirements, documenting and assessing information for implementing information security controls is required
• Good interpersonal, analytical, problem-solving, influencing, prioritization, decision-making and conflict resolution skills
• Bachelor's Degree in Computer Science or related discipline
• Master's degree preferred
• Previous experience in development of processes and procedures; Six Sigma Greenbelt or Blackbelt certification preferred
• Familiarity with frameworks such as ITIL, NIST and COBIT preferred
• Industry certifications such as CISSP, CGEIT, CISM, CISA, or CRISC