Director, Internal Audit AI Technology

About the job

Your Opportunity

Director, Internal Audit (PL)

The Internal Audit Department (IAD) of The Charles Schwab Corporation provides independent and objective assurance of the company's business operations to evaluate whether risks are adequately managed by internal controls.

The Technology Audit Enterprise Team is seeking an Internal Audit Director with specific experience in auditing artificial intelligence (AI) capabilities within the organization. You will design, implement and oversee audit coverage over large language model based and agent driven solutions used internally or client-facing, inclusive of control testing of AI lifecycle processes such as AI data governance; AI use case capture, inventorying, risk tiering; and AI evaluation, monitoring, and supervision. You will ensure adequate AI risk management frameworks and processes are in place and compliant with relevant regulatory requirements and/or industry standards.

Reporting to the Managing Director of the Technology Audit Enterprise Team, the Internal Audit Director will have responsibility for the independent and objective assurance activity designed to improve the organization’s operations and compliance with key regulations by evaluating and improving the efficiency of risk management, control, and governance processes. This position is also responsible for working with auditing resources provided by an external co-sourcing provider. The Director will have administrative responsibilities for direct reports, work on department wide initiatives, and run the larger and/or more complex audits.

What you’ll do:

• Audit Execution: Expected to lead AI-related audits including scheduling, planning, review and challenge of testing approach and testing conducted; review, challenge, and sign-off on audit deliverables; support of the audit team in meetings with key partners; and main point of contact with the assigned business unit leaders. Additionally, oversight of audit timelines, budget, resourcing, and achievements.

• Issues Identification: Oversight of issues identification, including review and challenge of draft issue observations including the issue identified, compensating controls, ratings, and the appropriateness of management action plans prior to finalizing the reports.

• Issue Management and Validation: Oversight for completion and validation status (including SLA adherence) for issues in audit portfolio. Review and challenge completed issue validation testing results.

• Business and Project Monitoring: Act as the primary point of contact for senior stakeholders who are accountable for the firm’s AI strategy, AI implementation, and AI governance.  Oversight for business and project monitoring program execution to identify emerging risks. Participate or lead business and project monitoring meetings including key driver of the agenda/talking points. Provide updates for Monthly IAD Leadership Risk Monitoring meetings.

• Risk Assessment: Supervisory role for the annual risk assessment process - play key role in the annual Risk Assessment through all stages. Provide quarterly risk assessment and audit universe updates to IAD management. Review and challenge audit universe updates after the completion of each audit.

• Coaching: Provide support, mentoring, and feedback to the audit team throughout the audit. Introduce key contributions to the formal performance evaluation process; as well as providing key contributions in the recruiting, onboarding, and ongoing support to new team members.

• Regulatory: Oversight for the completion and validation status (including SLA adherence) for MRAs received by the firm. This includes Review and challenge MRA validation work; evaluate the appropriateness of management’s draft responses to MRAs; perform retrospective reviews for adverse events (as required); Participate in regulatory meetings (i.e., exam, business monitoring, IAD monitoring); and provide responses to regulatory questions during exams.

• Administration/Training: Completion of firm-wide and departmental administration and training requirements.

• Other initiatives or special projects: Voluntary participation in departmental strategic initiatives.

What you have

What you have:

• 12+ years of internal audit or risk management experience in the financial services industry, with broker dealer experience preferred.

• Familiarity with risks and controls within AI lifecycle processes such as AI data governance; AI use case capture, inventorying, risk tiering; and AI evaluation, monitoring, and supervision.

• Familiarity with AI risk management frameworks, processes, and controls.

• Familiarity with AI related regulatory requirements and/or industry standards.

• Demonstrated experience leading audits and their associated team members, amongst a complex operational and regulatory environment.

• Ability to lead a project team and cultivate a strong working relationship with the internal business areas and risk, external co-sourcing provider, regulators, and other business stakeholders.  Proven ability to influence across a highly matrixed environment including IT teams, business partners and peer audit teams.

• Strong understanding of risks and internal controls and the ability to evaluate and determine adequacy and efficiency of controls.

• Excellent analytical skills, including the ability to anticipate issues and to design appropriate solutions.

• Strong verbal and written communication skills with a demonstrated ability to articulate effectively and authoritatively.

• Uses relationships and insights to successfully influence others. Builds authentic and positive relationships to create alignment and support.

• CPA, CIA, or CISA preferred.

• Bachelor’s degree or higher required. Preferably in Computer Science, Machine Learning, Mathematics, Physics, or a related field, or equivalent practical experience.

• Ability to travel 15-20%