Director, AI Security Governance (PL)

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location.

Charles Schwab is seeking a visionary and strategic leader to serve as Director of TRM – AI Security. This role will lead the development and execution of Schwab’s security risk management for AI, ensuring the safe and responsible use of artificial intelligence across the enterprise. The Director will oversee a team of experts conducting AI security assessments, working with security engineering teams to implement AI safeguards, and driving adoption of AI Trust, Risk, and Security Management (TRiSM) tools. This role is critical in shaping Schwab’s approach to secure AI innovation while aligning with Schwab’s policies and standards, industry guidance such as NIST and regulatory requirements.

Key Responsibilities:

Leadership & Strategy
•    Lead and mentor a team of AI security and risk management professionals.
•    Define and drive Schwab’s AI security vision, strategy, and roadmap.
•    Collaborate with cross-functional teams including Data Science, Corporate Risk Management, Legal, and Schwab Technology Services to align AI security initiatives.

AI Security Assessment & Governance
•    Oversee security assessments of AI models, systems, and applications.
•    Develop and maintain a comprehensive control framework to safeguard AI usage.
•    Establish security governance procedures for AI lifecycle management.

TRiSM Tools & Safeguards
•    Manage the evaluation, selection, and implementation of TRiSM tools.
•    Ensure integration of AI risk management tools with existing cybersecurity infrastructure.
•    Identify monitoring controls to manage AI Security risks and threats such as insider risk, data leakage prevention, malicious code injection, violations of acceptable usage requirements.
•    Implement technical and procedural safeguards to mitigate AI-related risks.

Training & Awareness
•    Develop and deliver secure AI training programs for technical and non-technical audiences.
•    Promote awareness of AI risks and best practices across the organization.

Program Oversight & Prioritization
•    Oversee and prioritize cybersecurity initiatives involving AI adoption.
•    Monitor project progress, resource allocation, and performance metrics.
•    Report on AI security posture to senior leadership and stakeholders.

Required Experience:

• Bachelor’s degree in Computer Science, Cybersecurity, Data Science, or related field.
• 10+ years of experience in cybersecurity
• Direct experience with AI, advanced analytics, model governance, digital products, technology transformation, or emerging-technology governance
• Proven leadership experience managing technical teams and strategic programs.
• Deep understanding of AI/ML technologies, model risk, and security implications.
• Familiarity with TRiSM tools and AI security governance frameworks (e.g., NIST AI RMF).
• Experience improving governance workflows or supporting client-facing or regulated products and services
• Experience engaging senior executives, governance committees, regulators, or boards
• Significant experience in financial services or another highly regulated industry, including governance, risk management, controls, compliance, product review, technology governance, or a related field
• Experience helping business, product, or technology teams navigate enterprise governance and approval processes
• Demonstrated ability to lead complex cross-functional work and influence senior stakeholders without direct authority
• Ability to translate complex risk, regulatory, policy, and technical requirements into clear actions for non-specialist audiences
• Strong facilitation, structured problem solving, program management, and executive communication skills
• Sound judgment and the ability to balance responsible risk management with innovation, client value, and business execution
• Working knowledge of enterprise governance models and the distinct responsibilities of business owners, governance facilitators, risk and control functions, and independent assurance
• Familiarity with AI governance, model risk, technology risk, data governance, privacy, cybersecurity, third-party risk, product governance, supervision, or responsible AI
• Understanding of governance considerations for generative, agentic, embedded, vendor-provided, and client- or representative-facing AI
• Experience with risk-based review models, governance patterns, reusable controls, intake workflows, inventories, or related reporting

Preferred Experience:

• Experience at a large financial-services institution
• Advanced degree or equivalent professional experience
• CISSP, CISM, or equivalent cybersecurity certifications.