Senior Director – Fraud & Payments Risk

Ally Bank•Charlotte, NC

17h

About The Position

The Senior Director – Fraud & Payments Risk is a newly created, independent second-line leadership role responsible for building and maturing Ally’s enterprise oversight framework across fraud and payments risk. The role advances governance, policy, risk appetite, reporting, and effective challenge across business lines and first-line fraud and payments functions, providing visibility into risk outcomes. It reports to the Executive Director of Operational Risk and interacts directly with the Chief Risk Officer, while collaborating with Legal and Compliance partners. The leader develops governance forums, manages the fraud and payments risk appetite framework, and prepares reporting for the ERMC and Board Risk Committee. The role advises, enables, and challenges modernization of Ally’s fraud and payments ecosystem as the company expands primary banking relationships, particularly in Consumer Banking deposits and investing. It helps balance innovation, customer experience, and profitable growth amid changing consumer expectations, fraud typologies, payment capabilities, and threats. It also connects fraud, payments, cyber, AML, and identity risk domains to support a converged, threat-aligned enterprise protection model. The position owns and maintains the enterprise fraud and payments risk oversight framework; independently assesses and reports on risks; challenges first-line strategies, products, controls, and technology plans without taking ownership of execution; and reviews RCSA results, control design, products, and remediation plans. It delivers risk appetite, KRI, and KPI reporting, escalates material events and emerging risks, and supports program health reporting to committees and the Board. It also represents Risk on cross-domain attack journey and modernization teams and provides risk input on payments modernization, identity and authentication strategy, AI-enabled fraud detection, and emerging-risk technology investments.

Requirements

12+ years of relevant experience in fraud risk management, payments risk, operational risk management, financial crimes, or a related independent risk management discipline within a large, regulated financial institution, or equivalent combination of education and experience.
Bachelor’s degree or equivalent combination of education and experience.
High school diploma or GED equivalent.
Demonstrated experience operating within a Three Lines of Defense model, including direct experience providing independent challenge to first-line business and operational functions.
Working knowledge of fraud typologies; consumer and commercial payment products and rails; cyber-enabled fraud; account takeover; synthetic identity; scams; money-mule activity; and their intersection with AML/BSA, technology, and operational risk obligations.
Experience preparing risk reporting and presenting to senior management committees and/or Board-level risk committees.
Independent judgment and ability to provide credible challenge to senior first-line leaders.
Strong analytical skills and ability to synthesize complex, cross-domain risk data into clear executive and Board-level narratives.
Transformational, collaborative leadership style and ability to build capabilities, shape future-state operating models, and create consensus across Fraud, Payments, Risk, Compliance, Cyber, and AML.
Sound understanding of enterprise risk management frameworks, RCSA methodology, and issue management processes.
Excellent verbal and written communication skills, including experience drafting policy, committee materials, and Board-ready reporting.
Strong executive presence and ability to influence senior stakeholders across Risk, Compliance, Legal, Technology, Cyber, and business-line leadership without direct authority.

Nice To Haves

Master’s degree in business, finance, risk management, criminal justice, or a related field.
Professional certification such as Certified Fraud Examiner (CFE), Certified Anti-Money Laundering Specialist (CAMS), or Financial Risk Manager (FRM).
Prior experience in a second-line fraud risk, payments risk, operational risk, or financial crimes oversight role at a large U.S. bank or bank holding company, with direct exposure to OCC, Federal Reserve, or FDIC supervisory expectations.
Experience building, standing up, or significantly redesigning a fraud, payments, financial crimes, or operational risk operating model, including governance, policy, risk appetite, reporting, effective challenge, and clearly defined first-line and second-line accountability.
Familiarity with payment products and rails, fraud analytics, AI/ML-enabled detection capabilities, identity and authentication (CIAM) strategy, and enterprise case-management platforms.

Responsibilities

Evolve, own, and maintain the enterprise fraud and payments risk oversight framework, including policies, risk taxonomies, risk appetite statements, governance, and second-line roles and responsibilities.
Establish, support, and enhance governance forums, with agendas covering risk appetite performance, material events, first-line performance, emerging risks, and audit or regulatory issue closure.
Independently identify, assess, measure, monitor, test, and report on fraud and payments risk across the enterprise, including aggregated risk across business lines and first-line functions.
Provide effective challenge to first-line strategies, products, detection rules, thresholds, controls, customer-experience decisions, and the enterprise fraud technology roadmap without assuming first-line execution ownership.
Review and challenge business-line and enterprise RCSA results, control design, new and modified products or payment capabilities, and issue remediation plans, partnering with the RCSA Program and Internal Audit.
Deliver regular fraud and payments risk appetite, KRI, and KPI reporting to the CRO, ERMC, and applicable Risk Committees, including trends in losses, payment risks, attack patterns, customer impacts, and control effectiveness.
Timely escalate material fraud and payments events, emerging risks, and risk appetite breaches to the CRO and relevant governance committees.
Support annual and periodic enterprise fraud and payments risk program health reporting to the Audit Committee and Board in partnership with Compliance and first-line functions.
Represent Risk on cross-domain attack journey and modernization teams spanning fraud, payments, cyber, identity, and AML.
Partner with Compliance, Cyber, Technology, Consumer Banking, and business-line leadership to close visibility gaps in fraud, payments, cyber, and financial-crime risk data and reporting.
Provide risk input into enterprise payments modernization, CIAM strategy, AI-enabled fraud detection initiatives, and emerging-risk technology investments.
Balance innovation, customer experience, risk management, and profitable growth in advice and challenge to leaders.

Benefits

Market-competitive base pay and pay-for-performance incentives based on personal and company goals.
Paid time off starting at 20 days, 11 paid holidays, and 8 hours of yearly volunteer time off; amounts may be prorated and vary by employment status and management level.
401(k) retirement savings plan with matching and company contributions.
Student loan pay-down and 529 educational savings assistance programs.
Tuition reimbursement.
Employee stock purchase plan.
Financial learning center and financial coach access.
Medical, dental, and vision insurance options.
Employee, spouse, and child life insurance.
Short- and long-term disability insurance.
Health Savings Account with employer contributions and Healthcare FSA.
Critical illness, accident, and hospital indemnity insurance.
Total well-being program.
Adoption, surrogacy, and fertility assistance.
Paid parental and caregiver leave.
Dependent Day Care FSA, backup child and adult/elder care days, and childcare discounts.
Employee Assistance Program.
Subsidized and discounted Weight Watchers program and other employee discount programs.
Potential travel allowances, relocation assistance, signing bonus, and/or equity depending on the role.
Annual incentive plan eligibility.