Director, Customer Identity & Access Management - CIAM

Ally•Lewisville, TX

1d•$135,000 - $235,000•Hybrid

About The Position

Ally Financial is seeking a Director, Customer Identity & Access Management (CIAM) Product to lead the strategy, roadmap, and execution of its customer authentication and identity portfolio. The role owns the end-to-end strategy, policy, and performance of authentication across mobile, web, and contact center channels, balancing fraud risk, security, operating expense, and customer experience. It is accountable for omnichannel capabilities such as login, MFA, passkeys, passwordless authentication, biometrics, account recovery, step-up authentication, and risk-based authentication, and translates enterprise priorities and emerging threats into product decisions and measurable outcomes. The Director works across a matrixed organization with Product, Fraud, Financial Crimes, Cybersecurity, Risk, Operations, Architecture, Engineering, and Customer Experience teams. The position is an in-office role with a weekly hybrid schedule; Ally work locations listed are Charlotte, NC; Lewisville, TX; Jacksonville, FL; Dresher, PA; and Detroit, MI. Specific work requirements may change based on leader discretion or business need. The role is intended for an experienced banking or fintech leader with expertise in fraud, identity, authentication, and customer risk management, and a record of influencing executives, aligning cross-functional teams, and delivering enterprise-scale capabilities in a regulated environment.

Requirements

Bachelor’s degree in Business, Technology, Computer Science, Information Systems, or a related field, or equivalent practical experience.
Minimum qualification: high school diploma or GED equivalent.
Minimum qualification: 9+ years of relevant experience or equivalent combination of education and experience.
10+ years of experience in banking or fintech as a fraud or identity leader, including direct ownership of customer authentication, account takeover controls, and login, MFA, or recovery experiences.
Demonstrated expertise in fraud prevention, identity strategy, customer authentication, account takeover mitigation, and digital/customer risk management.
Experience defining strategy and leading execution for enterprise-scale authentication, identity, or fraud-related capabilities.
Strong cross-functional operating skills and ability to balance fraud risk, security, and customer experience across Fraud, Cyber, Digital, Data & Analytics, and Compliance.
Strong track record influencing and aligning senior stakeholders across business, fraud, risk, operations, technology, and security functions.
Experience leading teams directly and/or through matrixed organizational structures.
Strong analytical, strategic, and decision-making skills, including use of fraud signals, customer insights, operational data, and risk trends to prioritize work.
Excellent written and verbal communication skills, including significant experience presenting to executive and senior leadership audiences.
Ability to navigate ambiguity, organizational complexity, and competing priorities while driving measurable outcomes.
Experience leading CIAM, IAM, authentication, digital identity, fraud prevention, or customer security product teams.
Deep familiarity with authentication and identity standards and capabilities such as MFA, SSO, OAuth 2.0, OpenID Connect, FIDO2, passkeys, biometrics, device binding, identity proofing, account recovery, FFIEC, and NIST.
Strong experience in financial services, fintech, or another highly regulated industry, particularly in environments with significant fraud risk, digital channel complexity, and regulatory oversight.
Experience with omnichannel customer journeys involving digital and assisted-service or call center authentication.
Familiarity with Financial Crimes operations, fraud operations, scam prevention, or risk-based authentication decisioning.
Experience with API-based products, platform capabilities, or developer-facing authentication services.
Proficiency with common product delivery and collaboration tools such as Jira, Confluence, analytics platforms, and UX collaboration tools.

Responsibilities

Set customer authentication policy and decision frameworks for login, step-up authentication, account recovery, and session trust, defining when to allow, challenge, escalate, or block access.
Own cross-channel authentication roadmaps and business requirements for mobile, web, and contact center experiences, including MFA, biometrics, device trust, session orchestration, and recovery flows.
Partner with Digital Login and Security product teams on app and web experiences, and with phone teams on inbound and outbound channels, vendors, IVR, and telephony.
Own selected vendor relationships in authentication and identity verification.
Direct authentication decisioning and capability strategy by specifying the signals, controls, and vendor capabilities required for authentication decisions.
Steer Fraud Data & Analytics teams on rules, models, and thresholds, and Fraud Platforms and Engineering teams on tooling, integrations, and platform enhancements.
Maintain an inventory of CIAM risks and mapped controls; use fraud investigations, loss analysis, and external threat intelligence to identify control gaps and prioritize remediation.
Evaluate and pilot new authentication capabilities, signals, and data sources to strengthen CIAM controls against emerging threats and attack patterns.
Define handoffs with adjacent identity teams, with Deposits/KYC/ID proofing responsible for initial identity verification at account opening and CIAM responsible for ongoing authentication, recovery, and session trust for returning customers.
Lead teams directly and/or through matrixed organizational structures and align senior stakeholders across business, fraud, risk, operations, technology, and security functions.

Benefits

20 paid time off days at program start, 11 paid holidays, and 8 hours of annual volunteer time off; amounts may be prorated and program details vary by status and management level.
401(k) retirement savings plan with matching and company contributions.
Student loan pay-down and 529 educational savings assistance programs.
Tuition reimbursement.
Employee stock purchase plan.
Financial learning center and financial coach access.
Flexible medical, dental, and vision insurance options.
Employee, spouse, and child life insurance; short- and long-term disability insurance.
Health Savings Account with employer contributions and Healthcare FSA.
Critical illness, accident, and hospital indemnity insurance.
Total well-being program supporting physical, social, emotional, and financial well-being.
Adoption, surrogacy, and fertility assistance.
Paid parental and caregiver leave.
Dependent Day Care FSA, backup child and adult/elder care days, and childcare discounts.
Employee Assistance Program.
Subsidized and discounted Weight Watchers program and other employee discount programs.
Potential travel allowances, relocation assistance, signing bonus, and/or equity, depending on the role.
Annual incentive plan eligibility.