IT/Cyber Risk Lead Analyst, Testing (Hybrid)

Ally Financial; Detroit (MI); Hybrid; USD 85,000 - 150,000; Full time

Job summary

Ally Financial in Detroit is seeking an IT/Cyber Risk Senior Analyst to lead the Asset Class testing function within IT Risk. You will guide walkthroughs with infrastructure, security, and engineering teams to assess control design and effectiveness.

You will design testing objectives, independently test complex technology controls, and document results to support risk discussions with stakeholders. Preferred candidates have 3+ years in IT Audit/IT Risk/InfoSec, strong communication, and

Qualifications

• 3+ years of IT Audit, IT Risk Management, Information Security, or Technology Control Testing in complex enterprise environments.
• Bachelor's degree in a relevant field preferred.
• Industry designations (CISA, CISSP, CRISC) preferred.
• Strong written and verbal communication, with ability to convey risks to technical and non-technical stakeholders.
• Experience with FFIEC guidance and frameworks such as NIST, COBIT, ISO 2700x, and PCI-DSS.

Responsibilities

• Lead the Asset Class testing function within IT Risk.
• Guide walkthroughs with infrastructure, security, and engineering teams to understand technology processes, challenge control design, and evaluate risk mitigation activities.
• Design testing objectives and independently perform testing of complex technology and infrastructure controls.
• Assess the design and operating effectiveness of key technology controls, including compliance with enterprise policies and regulatory requirements.
• Document test results and provide support for informed risk opinions to stakeholders.
• Draft testing observations and recommendations for technical and business stakeholders.
• Identify emerging technology risks and manage them in the IT risk register.

Skills

IT Audit

IT Risk Management

Information Security

Technology Control Testing

Vulnerability Management

Education

Bachelor's degree in relevant field

FR/IS industry designation: CISA

CISSP

CRISC

Tools

Databases

Operating systems

Job description

Ally Financial in Detroit is seeking an IT/Cyber Risk Senior Analyst to lead the Asset Class testing function within IT Risk. You will guide walkthroughs with infrastructure, security, and engineering teams to assess control design and effectiveness.

You will design testing objectives, independently test complex technology controls, and document results to support risk discussions with stakeholders. Preferred candidates have 3+ years in IT Audit/IT Risk/InfoSec, strong communication, and