Ally Financial Careers

The Sr Analyst position is a key role within the Fusion Center and is responsible for detecting, linking, and responding to emerging threats impacting Ally and our customers. This position will use internal and external intelligence to perform investigations against this data to identify fraud and financial crime exposure across the enterprise. This position requires the ability to analyze large amounts of data and extract relevant information to be used for control gap analysis, countermeasure development, and tactical intelligence reporting.

At this time, Ally will not sponsor a new applicant for employment authorization for this position.

• Conduct complex financial crime investigations, including researching and analyzing transaction information, customer data, public records, open-source information, and other external research tools to determine financial crime risk across the enterprise.
• Use research from business line (BL) fraud partners, external intelligence and data, reports from law enforcement, peer financial institutions, and industry consortium groups, to identify emerging threats impacting the sector.
• Correlate data points (e.g. authentication logs, transactions, account opening indicators) to develop countermeasures that detect and prevent malicious account activity and other financial crimes.
• Leverage a variety of technical and fraud monitoring detection tools to detect and link organized crime rings, assess intelligence gaps, and proactively characterize cyber and financial crime threats.
• Correlate malicious traffic and login activity across customer environments to identify attacks and unauthorized account access.
• Classify threat actor tactics, techniques, and procedures (TTPs) based on indicators and attack vectors exploited and use this information to identify additional risk across the bank.
• Document analytical findings in comprehensive investigative reports that summarize the emerging threat, customer risk, control gaps, and recommended action for remediation. 
• Partner with cybersecurity teams to use Security Orchestration, Automation, and Response (SOAR) tools to correlate fraud events and identify indicators of threat activity.
• Identify opportunities to accelerate the Cyber Fraud Fusion Center’s threat response and investigative analysis through automation and cross-functional workflows.
• Liaise with peer financial institutions and law enforcement to stay ahead of emerging cyber and financial crime threats, assist in joint investigation efforts, and represent the Cyber Fraud Fusion Center in industry consortium groups.
• Uses data analytic tools to develop dashboards that assist in tracking the Cyber Fraud Fusion Center’s Key Performance Indicators (KPIs) and financial crime trends.

• Bachelor’s degree in finance, Cybersecurity, Information Technology, or related field preferred.
• 3+ years of experience Financial Crimes, Cyber Security, Information Technology, or related fields. 
• Strong investigative skills required.
• Ability to understand and engage in technical discussions on threat actor tactics, techniques, and procedures (TTPs).
• Experience with complex methodologies, model development, and link analysis.
• Possess strong leadership and organizational skills, leading a team of talented analysts to uncover, investigate and report on financial crime activity within Ally. 
• Strong research, writing, and presentation skills; ability to convey complex concepts and communicate findings of emerging threats through written and oral investigative briefings.
• Strong critical thinking skills; ability to evaluate, analyze, and synthesize large quantities of data for trend development, threat modeling, and countermeasure development.
• Ability to function in a collaborative environment and partner with analysts/investigators and subject matter experts (SMEs) both internal and external to the organization.