General information

Career area

Technology

Work Location(s)

500 Woodward Avenue, Detroit, MI, 601 S. Tryon Street, Charlotte, NC

Remote?

No

Ref #

14238

Posted Date

Wednesday, December 14, 2022

Working time

Full-time

Ally and Your Career

At Ally, you get a startup feel, but experience the benefits of a company that's worked out the kinks and is fulfilling its purpose. We're always evolving and see that as a good thing. From owning our work to seeing its impact in the real world, our team is relentless in finding new ways technology can help make experiences better and help people. We are problem solvers, we value diverse thinking, we support one another, and we challenge ourselves to think bigger in the journey to deliver customer-obsessed tech solutions.

Ally Financial only succeeds when its people do - and that's more than some cliche people put on job postings. We live this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion. From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. You're constantly evolving, so shouldn't your opportunities be, too?

The Opportunity

The Data Security Lead is responsible for writing, reviewing and governance of Ally standards, policies, and controls. You will be part of a growing team driving strategic programs in data security, governance, innovation, cyber resiliency, risk reporting, and data life cycle monitoring activities. You will work with a team of security engineers & analysts within the IPRM Department to deploy, sustain and monitor technical controls and tools to meet specific security requirements, and defines processes and standards to ensure that security configurations and tools are maintained. You will be responsible for protecting sensitive data and assets by ensuring proper security controls are in place for data in motion, in use and at rest on structured and unstructured data platforms. You will build relationships with stakeholders, both within and outside IPRM, to deliver on the common goal of protecting sensitive Data in Ally

The Work Itself

• Identify Data security risks related to Data management and data privacy

• Act as data security advisory and establish strong relationship with other data functions within the organization (data privacy, data governance and management)

• Implement and manage data security technologies for on-premises and SaaS applications specifically transparent data encryption, masking, and monitoring tools.

• Integrate ServiceNow with monitoring tools for automated ticketing generation

• Retrieve data from multiple data sources and build data sets for end user business consumption using SQL, SAS or Python (Prefer Python)

• Analyze data and present data through reports that aid decision-making

• Create dashboards and interactive visual reports using PowerBI, Tableau or other tool

• Ensure security controls are correctly applied to systems, applications and platforms housing sensitive and critical data

• Conduct data security assessments to ensure and validate the security posture of the organization

The Skills You Bring

• 5+ years of data security experience, preferably in the financial industry

• 5+ years of experience in securing data in RDBMS and NoSQL Data stores

• Strong knowledge of encryption methods for data at rest, in use and in motion

• Knowledge of Data Security capabilities Encryption, Tokenization (Protegrity, Thales/Vormetric, etc.), De identification (Hashing, Masking, Redaction etc.) (Delphix, Informatica, Privitar, etc.), and Key and Certificate Management (Entrust, Thales/Gemalto, Venafi, etc.)

• Strong understanding of security controls (NIST, CIS and industry best practices) and how they should be implemented across applications, systems, and internal/cloud platforms

• Proficient with documenting security governance processes and procedures in team runbook

• Excellent verbal and written communication skills with both technical and non-technical partners

• One or more of these certifications strongly preferred: CISSP/GISP, CEH, CRISC, CompTIA Security+, AWS/Azure Security

• Ability to learn research and come up to speed quickly on new technology areas

• Experience with auditing and governance processes is a plus

• Experience with Delphix, and Imperva are a plus

• Knowledge of big data concepts and cloud data warehouse (Hadoop/ Snowflake) is a plus

• Knowledge of handling both structured/unstructured data in data lakes (with Hadoop Hive) is a plus

How We'll Have Your Back

• Ally's compensation program offers market-competitive base pay and pay-for-performance incentives (bonuses) based on achieving personal and company goals. But Ally's total compensation - or total rewards - extends beyond your paycheck and is designed to support and enrich your personal and professional life, including:
  • Time Away: competitive holiday and flexible paid-time-off, including time off for volunteering and voting.
  • Planning for the Future: plan for the near and long term with an industry-leading 401K retirement savings plan with matching and company contributions, student loan and 529 educational assistance programs, tuition reimbursement, and other financial well-being programs.
  • Supporting your Health & Well-being: flexible health and insurance options including dental and vision, pre-tax Health Savings Account with employer contributions and a total well-being program that helps you and your family stay on track physically, socially, emotionally, and financially.
  • Building a Family: adoption, surrogacy, and fertility support as well as parental and caregiver leave, back-up child and adult/elder day care program and childcare discounts.
  • Work-Life Integration: other benefits including LifeMatters® Employee Assistance Program, subsidized and discounted Weight Watchers® program and other employee discount programs.

  Who We Are:

  Ally Financial is a customer-centric, leading digital financial services company with passionate customer service and innovative financial solutions. We are relentlessly focused on "Doing it Right" and being a trusted financial-services provider to our consumer, commercial, and corporate customers. For more information, visit www.ally.com.

  Ally is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to age, race, color, sex, religion, national origin, disability, sexual orientation, gender identity or expression, pregnancy status, marital status, military or veteran status, genetic disposition or any other reason protected by law.

  We are committed to working with and providing reasonable accommodation to applicants with physical or mental disabilities. For accommodation requests, email us at [email protected]. Ally will not discriminate against any qualified individual who is capable of performing the essential functions of the job with or without reasonable accommodation.