Principal - Cyber Security

About the role

Ally Financial sees its people as individuals with interests, families, friends, dreams, and causes that matter to them. The company prioritizes health and safety, work-life balance, and diversity and inclusion, offering generous benefits and employee resource groups to support professional growth and development.

Responsibilities

• Work with the Director of Security Operations to ensure the security program addresses identified risks and business requirements.
• Gather, analyze, and assess the current and future threat landscape, providing a realistic overview of risks and threats in the enterprise environment.
• Identify process improvement opportunities and develop plans of action to resolve gaps with minimal management intervention.
• Monitor and report on compliance with security policies and standards, as well as the enforcement of policies within the IT department.
• Propose changes to existing policies and procedures to ensure operating efficiency and regulatory compliance.
• Assist resource owners and IT staff in understanding and responding to security audit failures reported by auditors and regulatory bodies.
• Provide security communication, awareness, and training for audiences ranging from senior leaders to field staff.
• Act as a liaison with vendors and the legal and purchasing departments to establish mutually acceptable contracts and service level agreements.
• Manage production issues and incidents and participate in problem and change management forums.
• Coordinate operational components of incident management, including detection, response, and reporting.
• Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans, and communicate information about residual risk.
• Manage security projects and provide expert guidance on security matters for other IT projects.
• Ensure audit trails, system logs, and other monitoring data sources are reviewed periodically and comply with policies and audit requirements.
• Design, coordinate, and oversee security testing procedures to verify the security of systems, networks, and applications, and manage the remediation of identified risks.

Qualifications

• Bachelor’s degree in information systems or a relevant field of study preferred.
• 5+ years of IT experience with at least 3 years focused in Information Security.
• CISSP preferred.
• Demonstrated experience in identifying, planning for resolution, and executing action plans for complex problems in a regulated environment.
• Familiarity with the principles of cryptography and cryptanalysis.
• Extensive experience in application technology security testing.
• Extensive experience in system technology security testing.

Benefits

• Time Away: 20 paid time off days plus 11 paid holidays and 8 hours of volunteer time off yearly (prorated based on start date and program varies by full or part-time status and management level).
• Planning for the Future: 401(k) retirement savings plan with matching and company contributions, student loan paydowns, 529 educational savings assistance programs, tuition reimbursement, employee stock purchase plan, and access to a financial learning center and financial coach.
• Supporting your Health & Well-being: Flexible health and insurance options including medical, dental, and vision; employee, spouse, and child life insurance; short- and long-term disability; pre-tax Health Savings Account with employer contributions; Healthcare FSA; critical illness, accident & hospital indemnity insurance; and a total well-being program.
• Building a Family: Adoption, surrogacy, and fertility assistance; paid parental and caregiver leave; Dependent Day Care FSA; backup child and adult/elder care days; and childcare discounts.
• Work-Life Integration: Mentally Fit Employee Assistance Program, subsidized and discounted Weight Watchers® program, and other employee discount programs.
• Other Compensation: Eligibility for travel allowances, relocation assistance, a signing bonus, and/or equity, depending on the role.

Pay

Base Pay Range: $110,000.00 – $180,000.00. An individual’s position within the range is determined by the specific role, scope and responsibilities, work experience, education, certifications, training, and additional qualifications. Pay is reviewed based on internal benchmarks, the competitive market, and business environment prior to extending an offer.

Incentive Compensation

This position is eligible to participate in the annual incentive plan.