Technology/Cyber Testing and Monitoring - Senior Risk Analyst

Ally•Detroit, MI

3d•$85,000 - $150,000

About The Position

The Senior Risk Analyst executes key components of Ally’s Technology Risk and Controls Assurance program, including independent control testing, issue validation, and risk reporting for the Technology Business Line Testing team. The role works with Ally Technology and Cyber leadership, IPRM, business leaders, and technology project and operations teams to conduct technology and cybersecurity risk assessments, interpret data and analytics outputs, and lead control remediation and uplift efforts. The analyst independently develops, completes, and documents tests in line with Ally policies, procedures, and industry best practices. The position also interprets automated testing results, control-monitoring dashboards, and other analytics to identify anomalies, assess sample adequacy, and advise management on emerging control practices. It contributes to uplift initiatives, special projects, and continuous improvement efforts, while completing finding validations and issue-management activities to Ally standards. The role may provide coaching and support to team members and contractors.

Requirements

At least 3 years of work experience in audit, assurance, or an equivalent line of service; technology or cybersecurity focus is strongly preferred.
Bachelor’s degree or a comparable combination of education and experience.
Working knowledge of technology control frameworks such as FFIEC, NIST SP 800-53, or the CRI Profile.
Detail-oriented, deadline-driven, self-directed, and organized.
Strong written and verbal communication skills.
Ability to work with structured datasets and dashboard or reporting tools, such as Excel-based data models or Power BI, to interpret testing results and identify control exceptions; coding or scripting experience is not required.
Ability to excel in a highly interactive team environment.
Working knowledge of a GRC platform such as Archer and Microsoft Office applications.
High school diploma or GED equivalent.

Nice To Haves

Relevant certification such as CIA, CISA, CISSP, CRISC, or CPA.
Technology or cybersecurity focus in audit, assurance, or equivalent experience.

Responsibilities

Partner with Ally Technology and Cyber leaders and cross-functional stakeholders while conducting individual control tests.
Independently develop, complete, and document tests in accordance with Ally policies and procedures and industry best practices.
Interpret data and analytics outputs, including automated testing results and control-monitoring dashboards, to identify anomalies and assess sample adequacy.
Consult management regarding emerging control practices.
Participate in and contribute to control uplift initiatives, special projects, and continuous improvement efforts.
Proactively identify emerging risks and stay informed about risk trends and industry-leading mitigation practices.
Complete assigned finding validations and issue-management activities with quality and in accordance with Ally standards.
Apply current cybersecurity risk assessment practices in control testing, consistent with evolving industry and regulatory baselines.
Provide coaching, guidance, and support to team members and contractors as needed.

Benefits

Paid time off, paid holidays, and annual volunteer time off.
401(k) retirement savings plan with matching and company contributions.
Student loan pay-down and 529 educational savings assistance programs.
Tuition reimbursement.
Employee stock purchase plan.
Financial learning center and financial coach access.
Medical, dental, and vision insurance options.
Employee, spouse, and child life insurance.
Short- and long-term disability insurance.
Health Savings Account with employer contributions and Healthcare FSA.
Critical illness, accident, and hospital indemnity insurance.
Total well-being program.
Adoption, surrogacy, and fertility assistance.
Paid parental and caregiver leave.
Dependent Day Care FSA, backup child and adult/elder care days, and childcare discounts.
Employee Assistance Program.
Subsidized and discounted Weight Watchers program and other employee discount programs.
Depending on the role, travel allowances, relocation assistance, a signing bonus, and/or equity.
Annual incentive plan eligibility.