Hybrid Senior Tech Risk & Controls Analyst

Ally; Detroit (MI); Hybrid; USD 85,000 - 150,000; Full time

Benefits offered by this job

Time Off benefits

401(k) retirement plan with matching

Tuition reimbursement

Employee stock purchase plan

Health and well-being programs

Job summary

Ally is seeking a Technology Risk and Controls Assurance professional in Detroit to execute critical testing, issue validation, and risk reporting. You’ll collaborate with Ally Technology and Cyber leadership, interpret analytics, and drive control uplift across projects.

You will develop tests, document results, and communicate findings to management, while staying aligned with regulatory expectations and industry best practices.

Qualifications

• 3+ years of work experience in audit, assurance, or equivalent line of service; technology/cyber focus strongly preferred.
• Bachelor’s degree or comparable combination of education and experience.
• Working knowledge of technology control frameworks (e.g., FFIEC, NIST SP800-53, CRI Profile, etc.).
• Relevant certification (CIA, CISA, CISSP, CRISC, CPA, etc.) is a plus.
• Detail-oriented, deadline driven, self-directed and organized individual.
• Desire to creatively identify problems that potentially were not known to exist and provide solutions and/or recommendations.
• Strong written and verbal communications skills.
• Ability to work with structured datasets and dashboard/reporting tools (e.g., Excel-based data models, Power BI, or similar) to interpret testing results and identify control exceptions — direct coding or scripting experience not required.
• Proven ability to excel in highly interactive team environment Working knowledge of GRC Platform (e.g., Archer) and Microsoft Office applications.

Responsibilities

• Partner with Ally Technology and Cyber Leaders working cross-functionally while conducting individual control tests
• Independently develop, complete, and document tests in accordance with Ally policies and procedures and industry best practices
• Interpret data literacy and analytics outputs — including automated testing results and control monitoring dashboards — to identify anomalies, assess sample adequacy, and provide consultation to management regarding emerging control practices
• Participate in uplift initiatives will be essential to the function’s contribution to the enterprise and its continuing role within Ally business
• Proactively identify emerging risks and remain informed of emerging risk trends and industry-leading mitigation practices
• Complete assigned validations of findings and issue management activities with quality and in accordance with Ally standards
• Contribute to control uplift initiatives, special projects, and continuous improvement efforts that strengthen control operations, reduce deficiencies, and support evolving regulatory and cybersecurity expectations.
• Provide coaching, guidance, and support to team members and contractors, as needed.
• Apply current cybersecurity risk assessment practices in control testing, consistent with evolving industry and regulatory baselines

Skills

Audit/assurance experience

Technology/cyber focus

Education

Bachelor’s degree or equivalent

High school Diploma or GED

Tools

Excel

Power BI

Job description

Ally is seeking a Technology Risk and Controls Assurance professional in Detroit to execute critical testing, issue validation, and risk reporting. You’ll collaborate with Ally Technology and Cyber leadership, interpret analytics, and drive control uplift across projects.

You will develop tests, document results, and communicate findings to management, while staying aligned with regulatory expectations and industry best practices.