Job Description

At Ally, we take the safety and health of our employees seriously. Related to COVID-19, Ally moved quickly and decisively to protect the health and well-being of our teammates, including instituting a work-from-home protocol in mid-March. We are continuing to hire during this time and are finding new and innovative ways to onboard new teammates remotely. Flexibility remains key as we approach the evolving situation. Our teams will continue to work-from-home until leadership, in coordination with governmental guidance and requirements, determine that it is safe to re-enter our facilities.

You can read more about how Ally is supporting our employees, customers, auto dealers and communities during this unprecedented time here.

Position Description

The IT Risk Senior Analyst -- IT Risk Assessments -- role is primarily responsible for overseeing the assessment of technology and cyber risks that align to various authoritative sources. In addition, this role will assist with the alignment of authoritative sources to the IT Process, Risk and Control inventory and will assist in the oversight of the Risk and Control self-assessment among other tasks as defined by the Director of IT/Cyber Risk. The successful candidate will have experience in IT or Risk Consulting, preferably in a Financial Services company. The position will require the ability to effectively assess risk and control effectiveness of IT/Information Security risks and issues and manage multiple priorities efficiently while demonstrating excellent time management skills

Job Responsibilities

* Understand and independently assess controls that are defined by various authoritative sources by leveraging related assessment and testing artifacts or through independent testing and collaboration with technology business partners.
* Research and communicate authoritative source assessment requirements -- define and execute an annual assessment schedule/plan.
* Assists in the administration of the IT Process, Risk and Control Inventory (PRC) with specific focus on ensuring proper alignment of authoritative source controls to the PRC.
* Assists in Risk and Control Self-Assessment (RCSA) independent review and challenge. Specifically, ensure adequate coverage of authoritative source control requirements within the IT RCSA.
* Deliver assessment results and conclusions as well as year-over-year (or assessment-over-assessment) trending and analytics.
* Assists in the follow-up and tracking of IT issues resulting from assessments performed.
* Engages across risk organization, including Internal Audit and Compliance to integrate IRM framework
* Create and maintain effective relationships with Information Technology process and control owners.

Qualifications

* 3+ years of experience in IT Audit, IT Risk Management or Information Security
* Experience in the banking industry preferred
* High level of proficiency performing assessments aligned with information security-related standards such as COBIT, ISO2700x, NIST, NYDFS, SWIFT (SWIFT preferred) and Federal Financial Institutions Examination Council (FFIEC)
* Industry designation preferred (e.g., CRISC, CISA, CISSP)
* Bachelor's degree in relevant field of study
* Strong written and oral communications skills
* Strong detail orientation with ability to research, compile, and report on data
* Ability to work effectively as a member of a cross-functional team
* Good organizational skills, ability to establish priorities
* Ability to multi-task, handle competing priorities and follow through on all open items/tasks
* Proficiency in MS Office Applications, Archer and multiple reporting tools
* Knowledge of IT infrastructure and security
* Travel up to 10%

Ally Overview

Ally Financial Inc. (NYSE: ALLY) is a leading digital financial services company and a top 25 U.S. financial holding company offering financial products for consumers, businesses, automotive dealers and corporate clients. Ally's legacy dates back to 1919, and the company was redesigned in 2009 with a distinctive brand, innovative approach and relentless focus on its customers. Ally has an award-winning online bank (member FDIC), one of the largest full service auto finance operations in the country, a complementary auto-focused insurance business, a growing digital wealth management and online brokerage platform, and a trusted corporate finance business offering capital for equity sponsors and middle-market companies.

Business Unit/Enterprise Function

Ally Risk function manages and analyzes our exposure to internal and external risk factors. The group strives to achieve an appropriate balance between risk and return, to limit unnecessary risk, and to protect the company's financial returns.

Total Rewards Information

Ally's compensation program offers market-competitive base pay and pay-for-performance incentives (bonuses) based on achieving personal and company goals. But Ally's total compensation -- or total rewards -- extends beyond your paycheck and is designed to support and enrich your personal and professional life, including:

* Time Away: competitive holiday and flexible paid-time-off, including time off for volunteering and voting.
* Planning for the Future: benefits to help you plan for the near and long term including an industry-leading 401K retirement savings plan with matching and company contributions, student loan and 529 educational assistance programs, tuition reimbursement and other financial well-being programs.
* Supporting your Health & Well-being: flexible health and insurance options including dental and vision, pre-tax Health Savings Account with employer contributions and a total well-being program that helps you and family stay on track physically, socially, emotionally and financially.
* Building a Family: adoption, surrogacy and fertility support as well as benefits that help you take care of your family -- parental and caregiver leave, back-up child and adult/elder day care program and child-care discounts.
* Work-Life Integration: other benefits including LifeMatters Employee Assistance Program, subsidized and discounted Weight Watchers program and other employee discount programs.