3rd Party Application Manager

About the role

At Ally, you get a startup feel, but experience the benefits of a company that has worked out the kinks and is fulfilling its purpose. We are always evolving and see that as a good thing. From owning our work to seeing its impact in the real world, our team is relentless in finding new ways technology can help make experiences better and help people. We are problem solvers, we value diverse thinking, we support one another, and we challenge ourselves to think bigger in the journey to deliver customer-obsessed tech solutions.

The Application Manager partners with all stakeholders to oversee a portfolio of third-party and business-managed applications, ensuring each solution aligns with enterprise technology, security, and compliance standards. This role serves as the central liaison between vendors, business teams, and IT to drive operational health, risk management, and lifecycle governance for all supported applications. The foundation of this role is flawless execution of risk, compliance, and governance responsibilities. As you build mastery of the controls and routines, you will be encouraged to identify opportunities where AI tools and automation can enhance quality and efficiency — always with a risk-aware lens. We believe the best application managers understand their controls deeply enough to know what can be safely optimized and what requires human judgment.

At this time, Ally will not sponsor a new applicant for employment authorization for this position.

Responsibilities

• Own end-to-end governance of a portfolio of third-party and business-managed applications.
• Ensure compliance with enterprise standards across 12+ critical control areas: IAM, Monitoring/Response/Recovery, Data Protection, Vulnerability Management, Third-Party Risk, BC/DR, Change Management, EA, EUC, PCI, Documentation/Runbooks, and Digital Customer Authentication.
• Execute and manage recurring compliance routines: Enterprise Access Compliance (EAC) reviews, Privileged Access Management (PAM), application risk self-assessments, catalog attestations, DAST scanning, DR reviews, EOL tracking, and vulnerability management.
• Serve as the primary interface with third-party vendors for support, upgrades, SLA adherence, and issue resolution.
• Support internal and external audits (FRB, SOX, PCI, TSD Risk, Centralized Testing) by providing required documentation and evidence.
• Partner with Enterprise Architecture, all Orgs on application catalog governance, knowledge transfer, and ServiceNow record accuracy.
• Maintain complete, audit-ready documentation at all times — no gaps, no excuses, no surprises during exam periods.

Continuous Improvement & AI Adoption

As you build confidence in the compliance fundamentals, you will progressively adopt AI and automation to work more effectively:

• Phase 1 — Learn the controls: Master the compliance routines, understand the “why” behind each control, and execute flawlessly in the current operating model.
• Phase 2 — Identify the toil: Recognize which tasks are repetitive, time-consuming, and low-judgment — candidates for safe automation.
• Phase 3 — Automate with guardrails: Leverage AI tools (e.g., Claude Code, scripting, workflow automation) to reduce manual effort while maintaining audit trail integrity, data sensitivity awareness, and human-in-the-loop oversight where required.

Examples of where AI can safely augment this role:

• Generating compliance documentation and attestation prep materials.
• Automating access review data collection and formatting.
• Accelerating vendor status tracking and SLA reporting.
• Synthesizing knowledge across application ecosystems for faster onboarding.

What remains human-judgment territory:

• Access approval decisions involving sensitive data or PII.
• Audit evidence interpretation and risk acceptance decisions.
• Vendor relationship management and escalation judgment calls.
• Any control activity where regulatory accountability requires a named individual.

Requirements

• 7+ years of relevant experience or equivalent combination of education and experience.
• High school Diploma or GED equivalent.

Qualifications

• At least 5+ years of IT infrastructure experience preferred.
• Bachelor’s degree in Computer Science or related field preferred.
• Experience supporting IT audits and compliance initiatives (FRB, SOX, PCI, internal controls).
• Experience coordinating with third-party vendors for application support, upgrades, and issue resolution.
• Proficiency in working with ticketing systems (ServiceNow), audit tools, and user provisioning platforms.
• Broad and deep understanding of technical concepts in multiple specialized fields to develop technical solutions with a consultative approach.
• Strong knowledge of all aspects of the development life cycle and an exposure to various current software development methodology approaches.
• Proficiency with incident management, root cause analysis and resolving production application issues with both short term and long-term solutions.
• Proficiency with standard development tools.
• Proficiency with AI tooling (i.e. Claude Code, Codex).
• Ability to multi-task in a fast-paced environment while prioritizing work items appropriately.
• Ability to manage and support enterprise business applications by leveraging internal and external teams along with third-party vendor solution.

Benefits

• Time Away: Program starts at 20 paid time off days in addition to 11 paid holidays and 8 hours of volunteer time off yearly (time off days are prorated based on start date and program varies based on full or part-time status and management level).
• Planning for the Future: Industry-leading 401K retirement savings plan with matching and company contributions, student loan pay downs and 529 educational save up assistance programs, tuition reimbursement, employee stock purchase plan, and financial learning center and financial coach access.
• Supporting your Health & Well-being: Flexible health and insurance options including medical, dental and vision, employee, spouse and child life insurance, short- and long-term disability, pre-tax Health Savings Account with employer contributions, Healthcare FSA, critical illness, accident & hospital indemnity insurance, and a total well-being program.
• Building a Family: Adoption, surrogacy and fertility assistance as well as paid parental and caregiver leave, Dependent Day Care FSA, back-up child and adult/elder care days, and childcare discounts.
• Work-Life Integration: Mentally Fit Employee Assistance Program, subsidized and discounted Weight Watchers® program, and other employee discount programs.
• Other compensations: Depending on the role, you may be eligible for travel allowances, relocation assistance, a signing bonus, and/or equity.

Pay

Base Pay Range: $90,000 - $150,000 USD. An individual's position in the range is determined by the specific role, the scope and responsibilities of the role, work experience, education, certification(s), training, and additional qualifications. We review internal pay, the competitive market, and business environment prior to extending an offer.

This position is eligible to participate in our annual incentive plan.

Schedule

Ally designates roles as (1) fully on-site, (2) hybrid, or (3) fully remote. Hybrid roles are generally expected to be in the office a certain number of days per week as indicated by your manager. Your hiring manager will discuss this role's specific work requirements with you during the hiring process. All work requirements are subject to change at any time based on leader discretion and/or business need.