Technology/Cyber Testing and Monitoring - Senior Risk Analyst

1611 Ally Bank; États-Unis; Hybride; USD 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Time away: 20 paid time off days + 11/

11 paid holidays + 8 hours volunteer时间

401K retirement with company matching

Student loan pay downs & 529 education

Tuition reimbursement

Employee stock purchase plan

Health, dental, and vision insurance

Life insurance

Short- and long-term disability

Well-being program and financial coach

Parental and caregiver leave

Résumé du poste

Ally Financial is seeking an experienced risk and controls professional to execute essential components of the Technology Risk and Controls Assurance program. You will conduct independent testing, issue validation, and risk reporting for the Technology Business Line Testing team, partnering with Ally Technology and Cyber leadership, IPRM, and business operations.

You will also interpret analytics outputs, lead control remediation initiatives, and contribute to uplift projects while coaching

Qualifications

• 3+ years of work experience in audit or assurance with a technology/cyber focus.
• Bachelor’s degree or equivalent combination of education and experience.
• Working knowledge of FFIEC, NIST SP800-53, and related controls.
• Certifications such as CIA, CISA, CISSP, CRISC are a plus.
• Strong written and verbal communication; data-driven testing approach.

Responsabilités

• Execute key components of the Technology Risk and Controls Assurance program.
• Document tests and validate findings per Ally policies and industry best practices.
• Interpret data outputs and lead control remediation and uplift efforts.
• Collaborate with stakeholders and coach team members as needed.
• Support continuous improvement and evolving regulatory expectations.

Connaissances

Technology risk testing

Data analytics

Stakeholder collaboration

GRC frameworks

Certifications (CIA, CISA, CISSP, CRIC

Power BI

Excel

Communication skills

Mentoring/Coaching

Formation

Bachelor’s degree

High school Diploma

Outils

Power BI

Excel

Archer GRC

Office Suite

Description du poste

Ally and Your Career Ally Financial only succeeds when its people do - and that’s more than some cliché people put on job postings. We love this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion. From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. You’re constantly evolving, so shouldn’t your opportunities be, too?

Work Schedule: Ally designates roles as (1) fully on-site, (2) hybrid, or (3) fully remote. Hybrid roles are generally expected to be in the office a certain number of days per week as indicated by your manager. Your hiring manager will discuss this role's specific work requirements with you during the hiring process. All work requirements are subject to change at any time based on leader discretion and/or business need.

The Opportunity

This role will be responsible for executing key components of the Technology Risk and Controls Assurance program, including independent control testing, issue validation, and risk reporting for the Technology Business Line Testing team. The role will work closely with multiple stakeholders including Ally Technology and Cyber leadership, IPRM, business leaders, and technology project and operations teams to conduct technology and cybersecurity risk assessments, interpret data and analytics outputs, and lead control remediation and uplift efforts.

The Work Itself

Partner with Ally Technology and Cyber Leaders working cross-functionally while conducting individual control tests.

Independently develop, complete, and document tests in accordance with Ally policies and procedures and industry best practices.

Interpret data literacy and analytics outputs – including automated testing results and control monitoring dashboards – to identify anomalies, assess sample adequacy, and provide consultation to management regarding emerging control practices.

Participate in uplift initiatives will be essential to the function's contribution to the enterprise and its continuing role within Ally business.

Proactively identify emerging risks and remain informed of emerging risk trends and industry-leading mitigation practices.

Complete assigned validations of findings and issue management activities with quality and in accordance with Ally standards.

Contribute to control uplift initiatives, special projects, and continuous improvement efforts that strengthen control operations, reduce deficiencies, and support evolving regulatory and cybersecurity expectations.

Provide coaching, guidance, and support to team members and contractors, as needed.

Apply current cybersecurity risk assessment practices in control testing, consistent with evolving industry and regulatory baselines.

The Skills You Bring

3+ years of work experience in audit, assurance, or equivalent line of service; technology/cyber focus strongly preferred Bachelor's degree or comparable combination of education and experience.

• Working knowledge of technology control frameworks (e.g., FFIEC, NIST SP800-53, CRI Profile, etc.)
• Relevant certification (CIA, CISA, CISSP, CRISC, CPA, etc.) is a plus
• Detail-oriented, deadline driven, self-directed and organized individual
• Desire to creatively identify problems that potentially were not known to exist and provide solutions and/or recommendations
• Strong written and verbal communications skills
• Ability to work with structured datasets and dashboard/reporting tools (e.g., Excel-based data models, Power BI, or similar) to interpret testing results and identify control exceptions – direct coding or scripting experience not required
• Proven ability to excel in highly interactive team environment
• Working knowledge of GRC Platform (e.g., Archer) and Microsoft Office applications

Minimum Qualifications

• 3+ years of experience
• High school Diploma or GED equivalent

How’ll Have Your Back

Ally's compensation program offers market-competitive base pay and pay-for-performance incentives (bonuses) based on achieving personal and company goals. Our Total Rewards program includes industry-leading compensation and benefits plus additional incentives that are designed to meet your needs and those of your family so you can get the most out of your career and your life, including:

• Time Away: Program starts at 20 paid time off days in addition to 11 paid holidays and 8 hours of volunteer time off yearly (time off days are prorated based on start date and program varies based on full or part-time status and management level).
• Planning for the Future: plan for the near and long term with an industry-leading 401K retirement savings plan with matching and company contributions, student loan pay downs and 529 educational save up assistance programs, tuition reimbursement, employee stock purchase plan, and financial learning center and financial coach access.
• Supporting your Health & Well-being: flexible health and insurance options including medical, dental and vision, employee, spouse and child life insurance, short- and long-term disability, pre-tax Health Savings Account with employer contributions, Healthcare FSA, critical illness, accident & hospital indemnity insurance, and a total well-being program that helps you and your family stay on track physically, socially, emotionally, and financially.
• Building a Family: adoption, surrogacy and fertility assistance as well as paid parental and caregiver leave, Dependent Day Care FSA back-up child and adult/elder care days and childcare discounts.