Vacancy expired!
Your Opportunity
We believe that, when done right, investing liberates people to create their own destiny. We are driven by our purpose to champion every client's goals with passion and integrity. We respect and appreciate the diversity of our employees, our clients, and the communities we serve. We challenge conventions strategically to create value for our clients, our firm and the world. We live and bring to life the concept of 'own your tomorrow' every day. We champion our employee strengths, guide their development, and invest in their long-term success. We hire optimistic, results-oriented, curious, innovative, and adaptable people with the desire to help our clients and one another succeed.The Schwab Technology Principal of Cloud Risk Center of Excellence is responsible for providing leadership in the identification, assessment, treatment and continuous monitoring of cloud information security risks resulting from Schwab's use of cloud computing services and technologies. This is a key role in assuring that cloud risks are optimally handled, Schwab client information is protected and our client's trust is maintained. Success in this role will require ability to lead collaborative efforts among internal and external stakeholders across multiple functions combined with strong expertise in risk management discipline and technology controls best practices. This is an individual contributor role. What you are good at The Technology Principal of Cloud Risk Center of Excellence will be responsible for the following duties:- Lead improvement projects to facilitate innovation, team productivity, and enhanced cloud risk management capabilities
- Execute risk assessments against cloud service providers and provide experienced input into and review of assessments conducted by other Cloud Risk Center of Excellence (CRCoE) team members
- Oversee first line of defense execution of controls within cloud environments and establish practices to measure and monitor control effectiveness on an on-going basis
- Perform high quality analysis of aggregate cloud risk assessment data, identify cloud security risk trends, and work with IT teams to document remediation action plans
- Develop and deliver executive-level reporting and presentations outlining cloud risks and status of defined action plans
- Lead and develop team continuous improvements including automation of risk assessment, leadership reporting activities, development and maintenance of online information portals, and audit and/or regulatory projects
- Contribute to the creation and ongoing development of cloud security key risk indicators metrics
- Define requirements and support design of online, automated executive-level dashboards for cloud metrics
- Participate in the planning and execution of cloud reporting automation including data source identification, risk metric calculations, and data quality testing
- Improve and maintain cloud risk assessment maturity through the development of standard processes, procedures, and work instructions
- Advocate and promote awareness of cloud security risks among business and technical partners
- Perform proactive management of findings by working with appropriate teams to develop remediation action plans, track progress, and facilitate risk treatment actions (exception or risk acceptance)
- Mentor Cloud Risk Center of Excellence (CRCoE) team members in developing their knowledge and command of cloud technology standard methodologies and risk management subject area.
- Support the development of risk assessments for existing or potential cloud applications supporting Schwab business and technology partners
- Build strong relationships and partner closely with business and technology partners across Charles Schwab Corporation and its affiliates
- Develop internal processes and tools to increase team efficiencies and continually mature operations
- May travel minimally as part of training and ongoing program developments and improvements
- 8+ years in Information Security, Risk Management, or Information Technology disciplines
- Superior attention to detail and focus on quality work delivery
- Expertise in information security best practices and technology risk management discipline
- Strong knowledge of and experience with cloud computing technologies and best practices
- Working knowledge of software development practices and technologies, DevOps and CI/CD.
- Experience in developing performance or risk metrics, and executive dashboards
- Excellent analytical & technical skills, able to research problems, diving deeply when necessary, to resolve root causes and solutions
- Must be a self-starter and able to work independently, as part of a team, and lead working groups as required
- Work ethic based on a strong desire to exceed expectations.
- Ability to work successfully in a very fast-paced, results-oriented environment. Requires excellent time management skills, ability to appropriately prioritize multiple, results-oriented demands.
- Ability to translate business needs into business requirements, and then implement
- Bachelor's Degree in Computer Science or related discipline
- Master's degree preferred
- Previous experience in development of processes and procedures; Six Sigma Greenbelt or Blackbelt certification preferred
- Industry certifications such as CISSP, CCSP, CISM, CISA, or CRISC
Vacancy expired!