Tech Cyber Risk Analyst — Testing & Controls

Ally-Financial; Detroit (MI); Hybrid; USD 85,000 - 150,000; Full time

Benefits offered by this job

Time Off

401K plan

Medical/Dental/Vision

Parental leave

Relocation assistance

Job summary

Ally Financial is seeking a Technology Risk and Controls Assurance professional to execute key control testing and risk assessments within the Technology Business Line. You will work with Ally Technology and Cyber leadership, IPRM, and project teams to interpret results and drive remediation.

The role requires experience in audit or assurance with a cyber focus, familiarity with FFIEC/NIST frameworks, and strong data analytics skills.

Qualifications

• 3+ years of work experience in audit, assurance, or equivalent line of service with a technology/cyber focus.
• Knowledge of technology control frameworks (e.g., FFIEC, NIST SP800-53).
• Relevant certifications (CIA, CISA, CISSP, CRISC, CPA) are a plus.

Responsibilities

• Execute key components of the Technology Risk and Controls Assurance program.
• Independently develop, document tests in line with Ally policies.
• Interpret data outputs and dashboards to identify control issues.
• Lead control remediation and uplift efforts with stakeholders.
• Contribute to control uplift initiatives and continuous improvement.

Skills

Audit experience

Cybersecurity

Data analytics

Testing

Education

Bachelor’s degree

Certifications (CIA/CISA/CISSP/CRISC/CPA)

Tools

Power BI

Excel

Archer

Job description

Ally Financial is seeking a Technology Risk and Controls Assurance professional to execute key control testing and risk assessments within the Technology Business Line. You will work with Ally Technology and Cyber leadership, IPRM, and project teams to interpret results and drive remediation.

The role requires experience in audit or assurance with a cyber focus, familiarity with FFIEC/NIST frameworks, and strong data analytics skills.