Third Party Application Manager .
Ally and Your Career
The Opportunity
At Ally, you get a startup feel, but experience the benefits of a company that has worked out the kinks and is fulfilling its purpose. We are always evolving and see that as a good thing. From owning our work to seeing its impact in the real world, our team is relentless in finding new ways technology can help make experiences better and help people. We are problem solvers, we value diverse thinking, we support one another, and we challenge ourselves to think bigger in the journey to deliver customer-obsessed tech solutions. To read more about what our tech team does, be sure to visit our tech blog at ally.tech
The Third Party Application Manager partners with business owners to oversee a portfolio of third‑party and SaaS applications, ensuring alignment with enterprise technology, security, risk, and compliance standards. This role serves as a central liaison between business teams, vendors, information security, and technology partners to maintain strong governance and operational integrity for supported applications. You will ensure that each application follows enterprise expectations for security, data handling, controls, and documentation, while facilitating communication and alignment across business, technology, and risk stakeholders. You will play a key role in ensuring application readiness through compliance with regulatory and internal controls in preparation for internal and external audits. Success in this role requires excellent communication, organizational strength, and the ability to translate technical or compliance needs into actionable guidance for business partners and vendors.
At this time, Ally will not sponsor a new applicant for employment authorization for this position.
The Work Itself
- Serve as the primary technology contact for assigned third‑party applications.
- Maintain application inventories, governance documentation, metadata, and related records.
- Working with Tech Delivery, ensure the proper onboarding, runbook creation, and decommissioning of vendor applications.
- Ensure that applications adhere to Enterprise Third Party security, compliance, and data handling standards.
- Partner with security, architecture, and risk teams on technology reviews and assessments.
- Partner with subject matter experts and sustain to ensure runbooks are maintained.
- Support the evaluation of vendor capabilities related to security, controls, and data requirements.
- Ensure applications comply with regulatory and internal control requirements.
- Maintain control-related documentation, including data classification, privacy, retention, access structures, and evidence for audits.
- Support both internal and external audits by collecting documents, providing evidence, responding to requests, and coordinating remediation.
- Facilitate periodic access reviews, control attestations, and compliance reporting activities.
- Participate in risk assessments and assist in documentation for identified issues or potential control gaps.
- Serve as liaison between Ally teams and third‑party vendors for functional discussions, compliance questions, documentation, and security inquiries.
- Review vendor‑provided compliance materials (e.g., SOC reports, security questionnaires).
- Coordinate escalations and information exchange between internal teams and vendors.
- Ensure vendor‑related documentation, standards responses, and required artifacts are complete and accurate.
- Provide regular communication regarding risks, documentation needs, compliance obligations, and upcoming assessments.
- Facilitate meetings, governance routines, application reviews, and knowledge-sharing sessions across stakeholders.
- Prepare executive‑ready summaries, risk updates, compliance documentation, and reporting materials.
- Prepare for and attend audit meetings, provide requested documentation, and be the technical voice in the meetings.
The Skills You Bring
- 7+ years of relevant experience
- Bachelor’s Degree in relevant field(s) of study or equivalent
- Bachelor’s degree in IT, Computer Science, MIS, or related field.
- 5+ years of experience managing or supporting enterprise or vendor-managed applications.
- Experience in regulated environments or roles requiring adherence to audit, compliance, or risk frameworks.
- Knowledge of application security principles, access management, and identity governance.
- Familiarity with architecture reviews, security assessments, or technology standards processes.
- Understanding of regulatory and internal control frameworks (SOX, PCI, GLBA, etc.).
- Ability to prepare audit evidence, respond to findings, and support remediation activities.
- Proven ability to align business, technology, and vendor stakeholders by managing communications, clarifying responsibilities, and leveraging strong interpersonal, documentation, and consensus‑building skills.
- Highly organized with excellent attention to detail.
- Strong analytical and problem‑solving abilities.
- Ability to manage multiple priorities in a structured, consistent manner.
- Ability to work independently while partnering effectively across teams.
- Experience in IT governance, application compliance, or technology risk programs.
How We'll Have Your Back
Ally's compensation program offers market-competitive base pay and pay-for-performance incentives (bonuses) based on achieving personal and company goals. Our Total Rewards program includes industry-leading compensation and benefits plus additional incentives that are designed to meet your needs and those of your family so you can get the most out of your career and your life, including:
- Time Away: Program starts at 20 paid time off days in addition to 11 paid holidays and 8 hours of volunteer time off yearly (time off days are prorated based on start date and program varies based on full or part-time status and management level).
- Planning for the Future: plan for the near and long term with an industry-leading 401K retirement savings plan with matching and company contributions, student loan pay downs and 529 educational save up assistance programs, tuition reimbursement, employee stock purchase plan, and financial learning center and financial coach access.
- Supporting your Health & Well-being: flexible health and insurance options including medical, dental and vision, employee, spouse and child life insurance, short- and long-term disability, pre-tax Health Savings Account with employer contributions, Healthcare FSA, critical illness, accident & hospital indemnity insurance, and a total well-being program that helps you and your family stay on track physically, socially, emotionally, and financially.
- Building a Family: adoption, surrogacy and fertility assistance as well as paid parental and caregiver leave, Dependent Day Care FSA back-up child and adult/elder care days and childcare discounts.
- Work-Life Integration: other benefits including Mentally Fit Employee Assistance Program, subsidized and discounted Weight Watchers® program and other employee discount programs.
- Other compensations: depending on the role for which you are considered, you may be eligible for travel allowances, relocation assistance, a signing bonus and/or equity.
- To view more detailed information about Ally’s Total Rewards, please visit this link: https://www.ally.com/content/dam/pdf/corporate/ally-total-rewards-snapshot.pdf
Who We Are:
Ally Financial is a customer-centric, leading digital financial services company with passionate customer service and innovative financial solutions. We are relentlessly focused on "Doing it Right" and being a trusted financial-services provider to our consumer, commercial, and corporate customers. For more information, visit www.ally.com.
Ally is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to age, race, color, sex, religion, national origin, disability, sexual orientation, gender identity or expression, pregnancy status, marital status, military or veteran status, genetic disposition or any other reason protected by law.
We are committed to working with and providing reasonable accommodation to applicants with physical or mental disabilities. For accommodation requests, email us at hrpolicy@ally.com. Ally will not discriminate against any qualified individual who is capable of performing the essential functions of the job with or without reasonable accommodation.