Remote Senior Analyst – Enterprise Fraud Cyber Risk @ Ally Financial

General information

Career area Risk City WFH – PA Work Location(s) PA Remote? Yes Ref # 20109 Posted Date 07-11-25 Working time Full time

Ally and Your Career

Ally Financial only succeeds when its people do – and that’s more than some cliché people put on job postings. We live this stuff! We see our people as, well, people – with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion. From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. You’re constantly evolving, so shouldn’t your opportunities be, too?
Work Schedule: Ally designates roles as (1) fully on-site, (2) hybrid, or (3) fully remote. Hybrid roles are generally expected to be in the office a certain number of days per week as indicated by your manager. Your hiring manager will discuss this role’s specific work requirements with you during the hiring process. All work requirements are subject to change at any time based on leader discretion and/or business need.

The Opportunity

The National Cyber Forensics Training Alliance (NCFTA) Sr. Analyst position is a key role within the Cyber Fraud Fusion Center and is responsible for acting as the liaison, physically located at NCFTA to other banks, federal law enforcement and representing Ally on industry working groups. Additionally, the Sr. Analyst is responsible for collecting intelligence for further processing and use within Ally to detect, link, and respond to current and emerging threats impacting Ally and our customers. This position will use internal and external intelligence to perform investigations against this data to identify fraud and financial crime exposure across the enterprise and NCFTA. This position requires the ability to build relationships with other financial institutions, and federal law enforcement.

The Work Itself

• Represent Ally at the NCFTA in Pittsburg PA, developing relationships with other banks, federal law enforcement and work groups. Also ensures that the Cyber Fusion team receives actionable timely and relevant intelligence on Cyber, AML and Fraud related events and incidents. 
• Conduct complex financial crime investigations, including researching and analyzing transaction information, customer data, public records, open-source information, and other external research tools to determine financial crime risk across the enterprise.
• Use research from business line (BL) fraud partners, external intelligence and data, reports from law enforcement, other financial institutions, and industry consortium groups to identify emerging threats impacting the sector.
• Correlate data points (e.g. authentication logs, transactions, account opening indicators) to develop countermeasures that detect and prevent malicious account activity and other financial crimes.
• Leverage a variety of technical and fraud monitoring detection tools to detect and link organized crime rings, assess intelligence gaps, and proactively characterize cyber and financial crime threats.
• Identify threat actor tactics, techniques, and procedures (TTPs) based on indicators and attack vectors exploited and use this information to identify additional risk across the bank.
• Document analytical findings in comprehensive investigative reports that summarize the emerging threat, customer risk, control gaps, and recommended action for remediation. 
• Partner with cybersecurity teams to use Security Orchestration, Automation, and Response (SOAR) tools to correlate fraud events and identify indicators of threat activity.
• Identify opportunities to accelerate threat response and investigative analysis through automation and cross-functional workflows.
• Liaise with peer financial institutions and law enforcement to stay ahead of emerging cyber and financial crime threats and assist in joint investigation efforts.
• Uses data analytic tools to develop dashboards that assist in tracking Key Performance Indicators (KPIs) and financial crime trends.
• Responsible for analyzing large amounts of data and extracting relevant information to be used for control gap analysis, countermeasure development, and tactical intelligence reporting.

The Skills You Bring

• Bachelor’s degree in finance, Cybersecurity, Information Technology, or related field preferred.
• 3+ years of experience working in working consortium or fusion center required 
• Represent Ally at the NCFTA in Pittsburg PA on daily basis, developing relationships with other banks, federal law enforcement and work groups.
• Ability to understand and engage in technical discussions on threat actor tactics, techniques, and procedures (TTPs).
• Experience with complex methodologies, model development, and link analysis.
• Possess strong leadership and organizational skills, leading a team of talented analysts to uncover, investigate and report on financial crime activity within Ally. 
• Strong research, writing, and presentation skills; ability to convey complex concepts and communicate findings of emerging threats through written and oral investigative briefings.
• Strong critical thinking skills; ability to evaluate, analyze, and synthesize large quantities of data for trend development, threat modeling, and countermeasure development.
• Ability to function in a collaborative environment and partner with analysts/investigators and subject matter experts (SMEs) both internal and external to the organization.

How We’ll Have Your Back

Ally’s compensation program offers market-competitive base pay and pay-for-performance incentives (bonuses) based on achieving personal and company goals. Our Total Rewards program includes industry-leading compensation and benefits plus additional incentives that are designed to meet your needs and those of your family so you can get the most out of your career and your life, including:

• Time Away: Program starts at 20 paid time off days in addition to 11 paid holidays and 8 hours of volunteer time off yearly (time off days are prorated based on start date and program varies based on full or part-time status and management level).
• Planning for the Future: plan for the near and long term with an industry-leading 401K retirement savings plan with matching and company contributions, student loan pay downs and 529 educational save up assistance programs, tuition reimbursement, employee stock purchase plan, and financial learning center and financial coach access.
• Supporting your Health & Well-being: flexible health and insurance options including medical, dental and vision, employee, spouse and child life insurance, short- and long-term disability, pre-tax Health Savings Account with employer contributions, Healthcare FSA, critical illness, accident & hospital indemnity insurance, and a total well-being program that helps you and your family stay on track physically, socially, emotionally, and financially.
• Building a Family: adoption, surrogacy and fertility assistance as well as paid parental and caregiver leave, Dependent Day Care FSA back-up child and adult/elder care days and childcare discounts.
• Work-Life Integration: other benefits including Mentally Fit Employee Assistance Program, subsidized and discounted Weight Watchers® program and other employee discount programs.
• Other compensations: depending on the role for which you are considered, you may be eligible for travel allowances, relocation assistance, a signing bonus and/or equity.
• To view more detailed information about Ally’s Total Rewards, please visit this link: https://www.ally.com/content/dam/pdf/corporate/ally-total-rewards-snapshot.pdf

Who We Are:

Ally Financial is a customer-centric, leading digital financial services company with passionate customer service and innovative financial solutions. We are relentlessly focused on “Doing it Right” and being a trusted financial-services provider to our consumer, commercial, and corporate customers. For more information, visit www.ally.com.

Ally is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to age, race, color, sex, religion, national origin, disability, sexual orientation, gender identity or expression, pregnancy status, marital status, military or veteran status, genetic disposition or any other reason protected by law.

We are committed to working with and providing reasonable accommodation to applicants with physical or mental disabilities. For accommodation requests, email us at hrpolicy@ally.com. Ally will not discriminate against any qualified individual who is capable of performing the essential functions of the job with or without reasonable accommodation.

: $85,000 – $150,000 USDAn individual’s position in the range is determined by the specific role, the scope and responsibilities of the role, work experience, education, certification(s), training, and additional qualifications. We review internal pay, the competitive market, and business environment prior to extending an offer. Incentive Compensation: This position is eligible to participate in our annual incentive plan.