Technology / Cyber Testing and Monitoring – Senior Risk Analyst

Ally; Detroit (MI); On-site; USD 85,000 - 150,000; Full time

Benefits offered by this job

Time off and holidays: 20 PTO days + /

401K with company matching

Relocation assistance

Equity

Job summary

Ally Financial is seeking a Technology Risk and Controls Assurance professional to execute critical control testing, issue validation, and risk reporting for the Technology Business Line Testing team. You will work with Ally Technology and Cyber leadership, IPRM, and various business units to drive risk assessments and uplift control practices.

The role emphasizes data analysis, using Excel/Power BI, and collaboration in a fast-paced, cross-functional environment with strong communication

Qualifications

• 3+ years in audit, assurance, or similar with technology/cyber focus preferred.
• Bachelor's degree or equivalent experience.
• Knowledge of FFIEC, NIST SP800-53, CRI Profile, etc.
• Certifications such as CIA, CISA, CISSP, CRISC, CPA are a plus.
• Strong written and verbal communication; detail-oriented and deadline-driven.

Responsibilities

• Execute key components of the Technology Risk and Controls Assurance program.
• Perform independent control testing, issue validation, and risk reporting.
• Collaborate with Ally Technology, Cyber leadership, IPRM, and business teams.
• Develop tests in line with Ally policies and industry best practices.
• Identify emerging risks and uplift control practices.
• Coach and support team members and contractors.

Skills

Audit experience

Cyber risk

Data analysis

Communication skills

Problem solving

Team collaboration

GRC tools

Education

Bachelor's degree

CIA/CISA/CISSP/CRISC/CPA certification

High school diploma

Tools

Excel

Power BI

Archer

Job description

Ally and Your Career

Ally Financial only succeeds when its people do - and that’s more than some cliché people put on job postings. We love this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion. From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. You’re constantly evolving, so shouldn’t your opportunities be, too?

Ally and Your Career

Ally Financial only succeeds when its people do - and that’s more than some cliché people put on job postings. We love this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion. From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. You’re constantly evolving, so shouldn’t your opportunities be, too?

Work Schedule

Ally designates roles as (1) fully on-site, (2) hybrid, or (3) fully remote. Hybrid roles are generally expected to be in the office a certain number of days per week as indicated by your manager. Your hiring manager will discuss this role’s specific work requirements with you during the hiring process. All work requirements are subject to change at any time based on leader discretion and/or business need.

The Opportunity

This role will be responsible for executing key components of the Technology Risk and Controls Assurance program, including independent control testing, issue validation, and risk reporting for the Technology Business Line Testing team. The role will work closely with multiple stakeholders including Ally Technology and Cyber leadership, IPRM, business leaders, and technology project and operations teams to conduct technology and cybersecurity risk assessments, interpret data and analytics outputs, and lead control remediation and uplift efforts.

The Work Itself

• Partner with Ally Technology and Cyber Leaders working cross-functionally while conducting individual control tests
• Independently develop, complete, and document tests in accordance with Ally policies and procedures and industry best practices
• Interpret data literacy and analytics outputs — including automated testing results and control monitoring dashboards — to identify anomalies, assess sample adequacy, and provide consultation to management regarding emerging control practices
• Participate in uplift initiatives will be essential to the function's contribution to the enterprise and its continuing role within Ally business
• Proactively identify emerging risks and remain informed of emerging risk trends and industry-leading mitigation practices
• Complete assigned validations of findings and issue management activities with quality and in accordance with Ally standards
• Contribute to control uplift initiatives, special projects, and continuous improvement efforts that strengthen control operations, reduce deficiencies, and support evolving regulatory and cybersecurity expectations.
• Provide coaching, guidance, and support to team members and contractors, as needed.
• Apply current cybersecurity risk assessment practices in control testing, consistent with evolving industry and regulatory baselines

The Skills You Bring

• 3+ years of work experience in audit, assurance, or equivalent line of service; technology/cyber focus strongly preferred
• Bachelor's degree or comparable combination of education and experience
• Working knowledge of technology control frameworks (e.g., FFIEC, NIST SP800-53, CRI Profile, etc.)
• Relevant certification (CIA, CISA, CISSP, CRISC, CPA, etc.) is a plus
• Detail-oriented, deadline driven, self-directed and organized individual
• Desire to creatively identify problems that potentially were not known to exist and provide solutions and/or recommendations
• Strong written and verbal communications skills
• Ability to work with structured datasets and dashboard/reporting tools (e.g., Excel-based data models, Power BI, or similar) to interpret testing results and identify control exceptions — direct coding or scripting experience not required
• Proven ability to excel in highly interactive team environment
• Working knowledge of GRC Platform (e.g., Archer) and Microsoft Office applications

Minimum Qualifications

• 3+ years of experience
• High school Diploma or GED equivalent

How We’ll Have Your Back

• Time Away: Program starts at 20 paid time off days in addition to 11 paid holidays and 8 hours of volunteer time off yearly (time off days are prorated based on start date and program varies based on full or part-time status and management level).
• Planning for the Future: plan for the near and long term with an industry-leading 401K retirement savings plan with matching and company contributions, student loan pay downs and 529 educational save up assistance programs, tuition reimbursement, employee stock purchase plan, and financial learning center and financial coach access.
• Supporting your Health & Well-being: flexible health and insurance options including medical, dental and vision, employee, spouse and child life insurance, short- and long-term disability, pre-tax Health Savings Account with employer contributions, Healthcare FSA, critical illness, accident & hospital indemnity insurance, and a total well-being program that helps you and your family stay on track physically, socially, emotionally, and financially.
• Building a Family: adoption, surrogacy and fertility assistance as well as paid parental and caregiver leave, Dependent Day Care FSA back-up child and adult/elder care days and childcare discounts.
• Work-Life Integration: other benefits including Mentally Fit Employee Assistance Program, subsidized and discounted Weight Watchers program and other employee discount programs.
• Other Compensations: depending on the role for which you are considered, you may be eligible for travel allowances, relocation assistance, a signing bonus and/or equity.

To view more detailed information about Ally’s Total Rewards, please visit this link: https://www.ally.com/content/dam/pdf/corporate/ally-total-rewards-snapshot.pdf

Who We Are

Ally Financial is a customer-centric, leading digital financial services company with passionate customer service and innovative financial solutions. We are relentlessly focused on "Doing it Right" and being a trusted financial-services provider to our consumer, commercial, and corporate customers. For more information, visit www.ally.com.

Ally is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to age, race, color, sex, religion, national origin, disability, sexual orientation, gender identity or expression, pregnancy status, marital status, military or veteran status, genetic disposition or any other reason protected by law.

In accordance with the Americans with Disabilities Act, if after review of the position expectations, you believe that you may need a medical accommodation to fulfill the duties of this role, please email [e-mail] with details of your accommodation request.

Base Pay Range

$85,000.00 - $150,000.00

An individual's position in the range is determined by the specific role, the scope and responsibilities of the role, work experience, education, certification(s), training, and additional qualifications. We review internal pay, the competitive market, and business environment prior to extending an offer.

Incentive Compensation

This position is eligible to participate in our annual incentive plan.