Principal Database Security

Ally Bank•Charlotte, NC

About The Position

Ally Financial is seeking a Principal leader to drive its enterprise Database Security and Data Obfuscation (Data Masking) program. The role provides strategic leadership, technical oversight, and execution accountability for protecting sensitive structured and unstructured data throughout its lifecycle in on-premises and cloud environments. It leads a hybrid onshore/offshore squad and oversees Database Activity Monitoring (DAM), database access controls, data masking, and Test Data Management (TDM). The role reports to the Director, Data Security Operations and works closely with Technology, Privacy, Enterprise Risk, business stakeholders, and other partners to manage data security risk, meet regulatory expectations, and enable secure use of data. The position is highly technical and combines program leadership with hands-on oversight, staff guidance, and coordination with IT and business management to align priorities with business objectives. It is responsible for enterprise strategy and roadmaps, operational performance, governance, incident integration, audit readiness, risk reporting, process improvement, and development of team members. Ally states that it will not sponsor a new applicant for employment authorization for this position.

Requirements

At least 7 years of relevant experience.
At least 5 years of experience in data security, with a strong focus on database security and/or data protection.
Bachelor’s degree in Computer Science or a similar field, or equivalent.
Hands-on experience with DAM platforms such as Imperva SecureSphere or IBM Guardium, or similar tools.
Proven experience leading an enterprise-scale data obfuscation program involving masking, tokenization, or de-identification.
Deep understanding of database platforms, including Oracle, SQL Server, NoSQL, and cloud data stores.
Strong understanding of regulatory processes and compliance frameworks, including PCI, SOX, GLBA, NYDFS, and Sarbanes-Oxley.
Experience implementing and managing data privacy controls in large-scale banking or financial environments.
Experience working with Power BI, including up-to-date knowledge of its features and functions.
Working knowledge of Splunk and related reporting capabilities.
Knowledge of big data concepts and cloud data warehouses, including Hadoop and Snowflake.
Knowledge of data security capabilities, including encryption, tokenization, de-identification, hashing, masking, and redaction.
Knowledge of key and certificate management.
Understanding of AWS and Azure, including use of AWS security tools.
Experience developing Key Risk Indicators and Key Performance Indicators related to Information Security or IT Risk Management.

Responsibilities

Define and lead the enterprise strategy for Database Security and Data Obfuscation capabilities.
Build and manage a global onshore/offshore delivery squad, including prioritization, capacity planning, and performance management.
Establish and maintain policies, standards, playbooks, and governance aligned with regulatory expectations, including FFIEC, GLBA, and SOX.
Drive a multi-year roadmap for DAM, masking, and sensitive data protection initiatives.
Oversee enterprise deployment and operations of Database Activity Monitoring and database security capabilities.
Ensure ongoing tuning, policy management, and optimization of database security controls.
Lead response and integration with SOC/CSIRT for database-related security incidents.
Deliver risk-based leadership reporting and metrics, including control coverage, alert handling, and remediation progress.
Design and implement Dynamic Data Masking and Test Data Management solutions aligned with business and regulatory requirements.
Lead enterprise-wide data masking initiatives across platforms and data domains.
Ensure secure handling of production data in lower environments and define best practices for data movement and protection.
Build reusable masking patterns, automation, and self-service capabilities to scale adoption across AWS, Azure, Snowflake, and hybrid architectures.
Oversee day-to-day operations of DAM, masking, and related controls, ensuring SLA adherence and operational excellence.
Manage issues, risks, and escalations, and provide transparency to senior leadership.
Ensure audit readiness and successful regulatory exam outcomes through documentation and control evidence.
Drive continuous improvement across processes, automation, and control effectiveness.
Mentor and develop team members, fostering continuous improvement and innovation.
Build relationships with business, IT, and compliance stakeholders to align security objectives with organizational goals.
Communicate effectively with technical and non-technical partners, including senior leadership.
Design and enhance support processes, perform data analysis, track workflow burndown to meet milestones, and deliver KPI/KRI reporting to improve the stability, resiliency, and performance of business-critical applications.
Provide technical guidance to staff as they work to accomplish company objectives.

Benefits

Market-competitive base pay and pay-for-performance incentives based on personal and company goals.
Paid time off starting at 20 days, 11 paid holidays, and 8 hours of volunteer time off yearly; time off is prorated based on start date and varies by full- or part-time status and management level.
401(k) retirement savings plan with matching and company contributions.
Student loan paydowns and 529 educational savings assistance programs.
Tuition reimbursement.
Employee stock purchase plan.
Financial learning center and financial coach access.
Medical, dental, and vision insurance options.
Employee, spouse, and child life insurance.
Short- and long-term disability insurance.
Health Savings Account with employer contributions and Healthcare FSA.
Critical illness, accident, and hospital indemnity insurance.
Total well-being program supporting physical, social, emotional, and financial well-being.
Adoption, surrogacy, and fertility assistance.
Paid parental and caregiver leave.
Dependent Day Care FSA, backup child and adult/elder care days, and childcare discounts.
Employee Assistance Program.
Subsidized and discounted Weight Watchers program and other employee discount programs.
Depending on the role, travel allowances, relocation assistance, a signing bonus, and/or equity may be available.
Annual incentive plan eligibility.