Third Party Application Manager

Ally-Financial; Charlotte (NC); Hybrid; USD 90,000 - 150,000; Full time

Benefits offered by this job

Time Off

401(k)

Health & Wellness

Job summary

Ally Financial is seeking an Application Manager to oversee a portfolio of third-party and business-managed applications. You will ensure alignment with enterprise technology, security, and compliance standards while coordinating with vendors and IT teams to drive risk management and lifecycle governance.

The role emphasizes driving operational health with AI-assisted automation opportunities, while preserving human judgment in critical decisions.

Responsibilities

• Own end-to-end governance of a portfolio of third-party and business-managed applications.
• Ensure compliance with enterprise standards across 12+ critical control areas.
• Execute and manage recurring compliance routines such as EAC reviews, PAM, risk self-assessments, attestations, DAST scanning, DR reviews, EOL tracking.
• Serve as the primary interface with third-party vendors for support, upgrades, SLA adherence, and issue resolution.
• Support internal and external audits by providing required documentation and evidence.
• Partner with Enterprise Architecture and other orgs on catalog governance and knowledge transfer.
• Maintain audit-ready documentation at all times.

Job description

Ally and Your Career Ally Financial only succeeds when its people do - and that’s more than some cliché people put on job postings. We love this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion. From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. You’re constantly evolving, so shouldn’t your opportunities be, too? Work Schedule: Ally designates roles as (1) fully on-site, (2) hybrid, or (3) fully remote. Hybrid roles are generally expected to be in the office a certain number of days per week as indicated by your manager. Your hiring manager will discuss this role’s specific work requirements with you during the hiring process. All work requirements are subject to change at any time based on leader discretion and/or business need.

The Opportunity At Ally, you get a startup feel, but experience the benefits of a company that has worked out the kinks and is fulfilling its purpose. We are always evolving and see that as a good thing. From owning our work to seeing its impact in the real world, our team is relentless in finding new ways technology can help make experiences better and help people. We are problem solvers, we value diverse thinking, we support one another, and we challenge ourselves to think bigger in the journey to deliver customer-obsessed tech solutions. To read more about what our tech team does, be sure to visit our tech blog at ally.tech.

The Application Manager partners with all stakeholders to oversee a portfolio of third-party and business-managed applications, ensuring each solution aligns with enterprise technology, security, and compliance standards. This role serves as the central liaison between vendors, business teams, and IT to drive operational health, risk management, and lifecycle governance for all supported applications. The foundation of this role is flawless execution of risk, compliance, and governance responsibilities. As you build mastery of the controls and routines, you will be encouraged to identify opportunities where AI tools and automation can enhance quality and efficiency — always with a risk-aware lens. We believe the best application managers understand their controls deeply enough to know what can be safely optimized and what requires human judgment. At this time, Ally will not sponsor a new applicant for employment authorization for this position.

Work Itself Core Responsibilities — Keeping the Train Moving

• Own end-to-end governance of a portfolio of third-party and business-managed applications
• Ensure compliance with enterprise standards across 12+ critical control areas: IAM, Monitoring/Response/Recovery, Data Protection, Vulnerability Management, Third-Party Risk, BC/DR, Change Management, EA, EUC, PCI, Documentation/Runbooks, and Digital Customer Authentication
• Execute and manage recurring compliance routines: Enterprise Access Compliance (EAC) reviews, Privileged Access Management (PAM), application risk self-assessments, catalog attestations, DAST scanning, DR reviews, EOL tracking, and vulnerability management
• Serve as the primary interface with third-party vendors for support, upgrades, SLA adherence, and issue resolution
• Support internal and external audits (FRB, SOX, PCI, TSD Risk, Centralized Testing) by providing required documentation and evidence
• Partner with Enterprise Architecture, all Orgs on application catalog governance, knowledge transfer, and ServiceNow record accuracy
• Maintain complete, audit-ready documentation at all times — no gaps, no excuses, no surprises during exam periods

Continuous Improvement & AI Adoption (Parallel Growth Track)

• Phase 1 — Learn the controls: Master the compliance routines, understand the "why" behind each control, and execute flawlessly in the current operating model
• Phase 2 — Identify the toil: Recognize which tasks are repetitive, time-consuming, and low-judgment — candidates for safe automation
• Phase 3 — Automate with guardrails: Leverage AI tools (e.g., Claude Code, scripting, workflow automation) to reduce manual effort while maintaining audit trail integrity, data sensitivity awareness, and human-in-the-loop oversight where required
• Examples of where AI can safely augment this role:
  • Generating compliance documentation and attestation prep materials
  • Automating access review data collection and formatting
  • Accelerating vendor status tracking and SLA reporting
  • Synthesizing knowledge across application ecosystems for faster onboarding
• What remains human-judgment territory:
  • Access approval decisions involving sensitive data or PII
  • Audit evidence interpretation and risk acceptance decisions
  • Vendor relationship management and escalation judgment calls
  • Any control activity where regulatory accountability requires a named individual

Preferred Qualifications

• At least 5+ years of IT infrastructure experience.
• Bachelor’s degree in Computer Science or related field preferred.
• Experience supporting IT audits and compliance initiatives (FRB, SOX, PCI, internal controls).
• Experience coordinating with third-party vendors for application support, upgrades, and issue resolution.
• Proficiency in working with ticketing systems (ServiceNow), audit tools, and user provisioning platforms.
• Broad and deep understanding of technical concepts in multiple specialized fields to develop technical solutions with a consultative approach.
• Strong knowledge of all aspects of the development life cycle and an exposure to various current software development methodology approaches.
• Proficiency with incident management, root cause analysis and resolving production application issues with both short term and long-term solutions.
• Proficient with standard development tools.
• Proficiency with AI tooling (i.e. Claude Code, Codex).
• Ability to multi-task in a fast- paced environment while prioritizing work items appropriately.
• Ability to manage and support enterprise business applications by leveraging internal and external teams along with third-party vendor solution.
• #LI-Hybrid

Minimum Qualifications

• 7+ years of relevant experience or equivalent combination of education and experience
• High school Diploma or GED equivalent

How We’ll Have Your Back

Ally’s compensation program offers market-competitive base pay and pay-for-performance incentives (bonuses) based on achieving personal and company goals. Our Total Rewards program includes industry-leading compensation and benefits plus additional incentives that are designed to meet your needs and those of your family so you can get the most out of your career and your life, including:

• Time Away: Program starts at 20 paid time off days in addition to 11 paid holidays and 8 hours of volunteer time off yearly (time off days are prorated based on start date and program varies based on full or part-time status and management level).
• Planning for the Future: plan for the near and long term with an industry-leading 401K retirement savings plan with matching and company contributions, student loan pay downs and 529 educational save up assistance programs, tuition reimbursement, employee stock purchase plan, and financial learning center and financial coach access.
• Supporting your Health & Well-being: flexible health and insurance options including medical, dental and vision, employee, spouse and child life insurance, short-and-long-term disability, pre-tax Health Savings Account with employer contributions, Healthcare FSA, critical illness, accident & hospital indemnity insurance, and a total well-being program that helps you and your family stay on track physically, socially, emotionally, and financially.
• Building a Family: adoption, surrogacy and fertility assistance as well as paid parental and caregiver leave, Dependent Day Care FSA back-up child and adult/elder care days and childcare discounts.
• Work-Life Integration: other benefits including Mentally Fit Employee Assistance Program, subsidized and discounted Weight Watchers program and other employee discount programs.
• Other Compensations: depending on the role for which you are considered, you may be eligible for travel allowances, relocation assistance, a signing bonus and/or equity.

Base Pay Range $90,000.00 - $150,000.00

In accordance with the Americans with Disabilities Act, if after review of the position expectations, you believe that you may need a medical accommodation to fulfill the duties of this role, please email [e-mail] with details of your accommodation request.

Ally is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to age, race, color, sex, religion, national origin, disability, sexual orientation, gender identity or expression, pregnancy status, marital status, military or veteran status, genetic disposition or any other reason protected by law.

Who We Are

Ally Financial is a customer-centrically, leading digital financial services company with passionate customer service and innovative financial solutions. We are relentlessly focused on "Doing it Right" and being a trusted financial- services provider to our consumer, commercial, and corporate customers. For more information, visit www.ally.com.

To view more detailed information about Ally’s Total Rewards, please visit this link: https://www.ally.com/content/dam/pdf/corporate/ally-total-rewards-snapshot.pdf