Risk Analyst II - IT/Cyber - Testing & Monitoring

General information

Career area Risk Work Location(s) 1100 Virginia Drive, PA, 500 Woodward Avenue, MI, 601 S. Tryon Street, NC Remote? No Ref # 19603 Posted Date 04-22-25 Working time Full time

Ally and Your Career

Ally Financial only succeeds when its people do - and that’s more than some cliché people put on job postings. We live this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion. From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. You’re constantly evolving, so shouldn’t your opportunities be, too?
Work Schedule: Ally designates roles as (1) fully on-site, (2) hybrid, or (3) fully remote. Hybrid roles are generally expected to be in the office a certain number of days per week as indicated by your manager. Your hiring manager will discuss this role's specific work requirements with you during the hiring process. All work requirements are subject to change at any time based on leader discretion and/or business need.

The Opportunity

As an Analyst II on the IT/Cyber Risk team, the qualified candidate is responsible for performing testing to ensure key IT/IS controls are designed appropriately and working effectively to mitigate risks. This individual will perform all aspects of control testing starting from scoping to communicating results. The successful candidate will have experience in IT Audit, Information Security, or Risk Consulting. The position will require the ability to effectively consult on IT/Information Security risks and issues and manage multiple priorities efficiently while demonstrating excellent time management skills.

In office role with hybrid schedule. Ally work locations Detroit MI, Charlotte NC, Fort Washington PA

At this time, Ally will not sponsor a new applicant for employment authorization for this position.

The Work Itself

• Perform Independent Risk Management testing for key IT/IS controls which includes accessing the design and operating effectiveness of the control structure and compliance with policies and standards.
• Document test results and provide support for an informed, objective opinion of the risk exposure.
• Draft testing observations and provide recommendations to management both verbally and in writing.
• Review management action plan to assess effectiveness of proposed remediation and appropriateness of the timeline.
• Identify emerging technology risks and lead the dialog among stakeholders to ensure that these risks are considered for entry into the IT risk register.

The Skills You Bring

• 1+ years of experience in IT Audit, IT Risk Management, Information Security or Cyber Security required
• Experience in the banking industr