Hybrid IT/Cyber Risk Testing Senior Analyst

1611 Ally Bank; United States; Hybrid; USD 85,000 - 150,000; Full time

Benefits offered by this job

Time off program (PTO + holidays)

401K with company match

Health insurance

Employee discounts

Job summary

Ally Financial is seeking an IT/Cyber Risk Senior Analyst to lead the Asset Class testing function within IT Risk. You will design testing objectives and independently test complex technology and infrastructure controls, coordinating with infrastructure, security, and engineering teams to evaluate risk and compliance with policies and standards.

You will mentor teammates, communicate findings to technical and business stakeholders, and contribute to risk discussions across enterprise IT.

Qualifications

• 3+ years of IT Audit, IT Risk Management, Information Security, or Technology Control Testing in complex environments.
• Experience in banking is preferred.
• Industry designation preferred (e.g., CISA, CISSP, CRISC).
• Strong written and verbal communication of risks and remediation.

Responsibilities

• Lead the Asset Class testing function within IT Risk.
• Guide walkthroughs with infrastructure, security, and engineering teams.
• Design testing objectives and independently test complex technology controls.
• Evaluate design and operating effectiveness of key technology controls.
• Provide guidance to team and document test results for stakeholders.

Skills

IT Audit

IT Risk Management

Information Security

Technology Control Testing

Strong communication

Education

Bachelor's degree in relevant field

Job description

Ally Financial is seeking an IT/Cyber Risk Senior Analyst to lead the Asset Class testing function within IT Risk. You will design testing objectives and independently test complex technology and infrastructure controls, coordinating with infrastructure, security, and engineering teams to evaluate risk and compliance with policies and standards.

You will mentor teammates, communicate findings to technical and business stakeholders, and contribute to risk discussions across enterprise IT.