Overview As a Senior Security Design Review Architect, you shape Schwab's security posture by guiding design decisions across cloud, on-premises, and AI-enabled environments. You'll partner with cross-functional teams to define secure deployment patterns, risk-based controls, and architecture standards that protect clients and data. Your work drives secure, scalable solutions aligned with regulatory expectations and business goals. This role offers influence across technology leaders and executives, with a meaningful impact on enterprise resilience and trust.
Responsibilities- Conduct secure design reviews, architecture assessments, threat modeling, and security risk evaluations for cloud, on-prem, hybrid, SaaS, AI, and applications
- Define security requirements, non-functional requirements, secure deployment patterns, and security controls with Domain Architects, PMs, POs, and engineering teams
- Describe solution intent, trust boundaries, data flows, interdependencies, and architectural risks
- Review and approve projects for risk, controls, compliance, and adherence to standards
- Perform architecture risk assessments and threat modeling to identify vulnerabilities and gaps
- Develop and maintain security reference architectures, design standards, reusable patterns, and deployment models
- Evaluate technology solutions against frameworks like NIST CSF, NIST 800-53, AI RMF, OWASP, CIS, Zero Trust, SSDLC
- Present findings and recommendations to executive leadership
- Collaborate across business and technology stakeholders to balance security with innovation
Key requirements- Bachelor's degree in Computer Science, Cybersecurity, IT, Engineering or related field
- 10+ years designing and governing enterprise security architectures, controls, and solutions
- Deep expertise across AI Security, CIAM/IAM, Cloud Security, Application Security, Data Protection, Risk Management
- Experience with security design reviews, threat modeling, security control assessments, and governance activities
- Ability to document security risks, evaluate mitigations, define compensating controls, and support risk-based decisions
- Strong collaboration, communication, and stakeholder management skills
- Flexibility to operate across technical and business contexts, balancing security with business needs
- collaboration
- stakeholder management
- influencing
- IAM/CIAM
- Cloud Security
- Application Security
