Senior Manager, QA - Technology

Our Opportunity

We believe in the importance of in‑office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

• Lead independent quality assurance reviews across all internal audit activities, with a focus on IT‑related audits (e.g., infrastructure, application, cybersecurity, and project audits), to assess conformance with internal policies and procedures, regulatory expectations, and professional standards.
• Evaluate not only audit execution quality, but also the effectiveness of audit coverage, risk identification, and overall assurance provided across audit types, including technology, operational, financial, and regulatory compliance audits, applying independent judgment and professional skepticism.
• Evaluate the effectiveness of IT‑related audit coverage, including whether audit approaches appropriately address complex technology environments and IT‑dependent business processes.
• Identify themes and systemic improvement opportunities across QA reviews, with a focus on driving meaningful enhancements to audit quality.
• Prepare and review audit work papers and QA analyses to confirm conclusions are well‑supported, clearly articulated, and aligned to applicable standards.
• Prepare clear, impactful QA reporting, including findings and recommendations that drive actionable and sustainable remediation of root causes.
• Provide candid, constructive feedback and challenge to audit teams to strengthen audit execution practices, risk perspectives, and control evaluations.
• Monitor and assess the effectiveness of audit teams’ remediation of QA findings, including whether actions address underlying causes and reduce the likelihood of recurrence.
• Provide subject matter expertise on IT risks, controls and audit methodology, and support continuous improvement of QA processes, manuals, tools and templates.
• Provide support, guidance, and feedback to QA team members and help enhance proficiency in IT risk domains, control evaluation, and audit methodologies, while reinforcing expectations for critical thinking and effective challenge.
• Support execution of the QAIP, including contributing to targeted reviews, methodology updates, and strategic initiatives to enhance QA coverage, efficiency, and impact.
• Leverage emerging technologies, including artificial intelligence (AI), to enhance the efficiency, consistency, and depth of QA activities, including analysis, review approaches, and identification of insights and improvement opportunities.
• Assist with documentation requests in connection with external quality assurance reviews and regulatory exams related to QA and IAD activities.
• Periodically support the development and delivery of IAD methodology updates and training of internal audit team members.
• Support strategic initiatives to expand the QAIP scope, coverage, and plan and sustain a collaborative culture and partnership with IAD.

• At least seven years’ experience in IT internal audit, technology risk management, or similar role, preferably in a public accounting, financial services, and/or a regulatory agency, including at least 3 years in a management or leadership role.
• Demonstrated experience leading, reviewing and supervising IT‑focused audits across areas such as infrastructure, applications, cybersecurity, technology projects, and IT‑dependent business processes.
• Strong understanding of complex IT environments, including infrastructure, applications, cybersecurity, and cloud‑based technologies, and the associated risks and control considerations.
• Strong knowledge of IT governance frameworks (e.g., COBIT, NIST, ISO 27001) and regulatory requirements applicable to financial institutions (e.g., GLBA, GDPR, 23 NYCRR 500).
• Working knowledge of the Institute of Internal Auditors (IIA) Global Audit Standards, and applicable regulatory guidance (e.g., SR 13‑1, SR 03‑05). Strong understanding of risks and internal controls, including the…