Senior Cyber Risk & Testing Analyst

VulnU; North Carolina; Hybrid; USD 85,000 - 150,000; Full time

Benefits offered by this job

Paid parental leave

Retirement match

Learning budget

Equity

Job summary

Ally Financial is seeking a Senior Risk Analyst in the Technology Risk and Controls Assurance team. You will conduct independent control tests, validate issues, and report risks across the Technology Business Line.

You will collaborate with Ally Technology leadership, IPRM, and project teams to assess cybersecurity risk, interpret analytics outputs, and drive remediation. A bachelor's degree and relevant certifications are preferred.

Qualifications

• 3+ years of work experience in audit, assurance, or equivalent line of service; technology/cyber focus strongly preferred.
• Working knowledge of technology control frameworks (e.g., FFIEC, NIST SP800-53).
• Certification (CIA, CISA, CISSP, CRISC, CPA) is a plus.

Responsibilities

• Execute key components of the Technology Risk and Controls Assurance program, including independent control testing and issue validation.
• Interpret data literacy and analytics outputs to identify anomalies and assess sample adequacy.
• Lead control remediation and uplift efforts and contribute to enterprise-wide risk management.
• Provide coaching and guidance to team members and contractors.

Skills

Audit experience

Cyber risk testing

Data analysis

Communication skills

Education

Bachelor's degree or higher

Tools

GRC tools (Archer)

Excel/Power BI

Job description

Ally Financial is seeking a Senior Risk Analyst in the Technology Risk and Controls Assurance team. You will conduct independent control tests, validate issues, and report risks across the Technology Business Line.

You will collaborate with Ally Technology leadership, IPRM, and project teams to assess cybersecurity risk, interpret analytics outputs, and drive remediation. A bachelor's degree and relevant certifications are preferred.