Analyst II - Crisis Management, Incident & Technology Management

General information

Career area

Risk

Work Location(s)

601 S. Tryon Street, NC

Remote?

No

#

22515

Posted Date

06-17-26

Working time

Full time

Ally and Your Career

Ally Financial only succeeds when its people do - and that's more than some cliché people put on job postings. We live this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion.

From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. You're constantly evolving, so shouldn't your opportunities be, too?

Work Schedule:

Ally designates roles as (1) fully on-site, (2) hybrid, or (3) fully remote. Hybrid roles are generally expected to be in the office a certain number of days per week as indicated by your manager. Your hiring manager will discuss this role's specific work requirements with you during the hiring process. All work requirements are subject to change at any time based on leader discretion and/or business need.

The Opportunity

This role is on a hybrid schedule in our Charlotte, NC office. This role is in office a few days weekly with some remote work.

Within Ally's Crisis Management & Business Continuity (CMBC) function, the Incident & Technology Management (I&TM) Analyst II assists the Crisis Management (CM) team in developing, documenting, and executing incident/crisis response processes. The Analyst II supports CM tools used for risk and asset monitoring, emergency notification, and planning/response management. This role will actively participate in cross-functional incident response to mitigate business disruption.

The role will report to the Manager of the I&TM team.

The ideal candidate is detail-oriented and innovative, and has experience balancing daily responsibilities, risk monitoring, and incident response. The candidate is comfortable with context switching in a fast-paced and potentially ambiguous response environment. They are skilled in situation reporting, tool management, and building collaborative relationships with internal and external stakeholders.

At this time, Ally will not sponsor a new application for employment authorization for this position.

The Work Itself

* Support CM's Incident & Technology Management function (and broader CMBC organization) in executing its responsibilities.

* Maintain and execute monitoring, escalation, and response tracking processes, including logging incidents, documenting actions, and preparing management summaries and related materials.

* Coordinate cross-functionally to support the timely identification and escalation of risks and potential crises that may impact Ally, including technology, cyber, facilities, weather, personal safety, and domestic or international events.

* Support the use and administration of tools and technology related to monitoring, notification, incident tracking, and response coordination, including assisting stakeholders with tools as needed.

* Assist in the development and maintenance of CM-related metrics and trend analysis by compiling data, updating records, and supporting recurring reporting activities.

* Utilize Ally's emergency notification system to support the timely dissemination of incident-related communications, and to collaborate with internal and external partners on system enhancements, testing, and related process improvements.

* Maintain and enhance CM documentation by identifying process gaps, workflow issues, and areas for improvement, while supporting efforts to streamline documentation, tracking, reporting, and other operational processes in alignment with relevant enterprise frameworks.

* Prepare presentations, briefing materials, status updates, and summary documentation for leadership briefings, committees, and other stakeholder forums.

* Support response management operations, which may occur outside of regular working hours and during the weekend.

* Maintain and enhance processes for reporting and document…