Senior Cyber Risk & Controls Tester

Ally; Charlotte (NC); On-site; USD 85,000 - 150,000; Full time

Job summary

Ally Financial is seeking a Technology Risk and Controls Assurance professional in Charlotte, NC. The role focuses on independent control testing, issue validation, and risk reporting for the Technology Business Line Testing team.

You'll collaborate with Ally Technology, Cyber leadership, and multiple stakeholders to assess risk and drive remediation efforts. Ideal candidates bring 3+ years in audit/assurance with cyber focus, knowledge of FFIEC/NIST controls, and certifications such as

Qualifications

• 3+ years of work experience in audit, assurance, or equivalent line of service; technology/cyber focus strongly preferred
• Bachelor's degree or comparable combination of education and experience
• Working knowledge of technology control frameworks (e.g., FFIEC, NIST SP800-53, CRI Profile, etc.)
• Relevant certification (CIA, CISA, CISSP, CRISC, CPA, etc.) is a plus
• Detail-oriented, deadline driven, self-directed and organized individual
• Desire to creatively identify problems that potentially were not known to exist and provide solutions and/or recommendations
• Strong written and verbal communications skills
• Ability to work with structured datasets and dashboard/reporting tools (e.g., Excel-based data models, Power BI, or similar) to interpret testing results and identify control exceptions — direct coding or scripting experience not required
• Proven ability to excel in highly interactive team environment Working knowledge of GRC Platform (e.g., Archer) and Microsoft Office applications

Responsibilities

• Partner with Ally Technology and Cyber Leaders working cross-functionally while conducting individual control tests
• Independently develop, complete, and document tests in accordance with Ally policies and procedures and industry best practices
• Interpret data literacy and analytics outputs — including automated testing results and control monitoring dashboards — to identify anomalies, assess sample adequacy, and provide consultation to management regarding emerging control practices
• Participate in uplift initiatives will be essential to the function's contribution to the enterprise and its continuing role within Ally business
• Proactively identify emerging risks and remain informed of emerging risk trends and industry-leading mitigation practices
• Complete assigned validations of findings and issue management activities with quality and in accordance with Ally standards
• Contribute to control uplift initiatives, special projects, and continuous improvement efforts that strengthen control operations, reduce deficiencies, and support evolving regulatory and cybersecurity expectations.
• Provide coaching, guidance, and support to team members and contractors, as needed.
• Apply current cybersecurity risk assessment practices in control testing, consistent with evolving industry and regulatory baselines

Skills

Audit experience

Cyber/tech focus

Bachelor's degree

GRC frameworks

Certifications

Data analysis

Communication skills

Excel/Power BI literacy

Team collaboration

Education

Bachelor's degree

High school diploma

Tools

Archer

Power BI

Excel

Microsoft Office

Job description

Ally Financial is seeking a Technology Risk and Controls Assurance professional in Charlotte, NC. The role focuses on independent control testing, issue validation, and risk reporting for the Technology Business Line Testing team.

You'll collaborate with Ally Technology, Cyber leadership, and multiple stakeholders to assess risk and drive remediation efforts. Ideal candidates bring 3+ years in audit/assurance with cyber focus, knowledge of FFIEC/NIST controls, and certifications such as