> Markdown version of [/jobs/ext/2696069-principal-cyber-security](https://www.wearedevelopers.com/jobs/ext/2696069-principal-cyber-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal - Cyber Security

- **Company:** Ally Financial Inc.
- **Location:** Detroit, MI, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $110,000.0 - $180,000.0
- **Contract:** Permanent contract
- **Skills:** Software Applications, Cyber Security, Information Systems, Data Security, Information Technology Security Auditing, Information Technology
- **Published:** September 3, 2026
- **Apply:** https://www.detroitjobsite.com/job.asp?id=3375523645&tx=JJ2115FFK&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Bachelor's degree in information systems or relevant field of study preferred
 * 5+ years of IT experience with at least 3 years of focus in Information Security
 * CISSP preferred
 * Demonstrated experience in the identification, plan for resolution and execution of action plans for complex problems in a regulated environment.
 * Familiarity with the principles of cryptography and cryptanalysis
 * Extensive experience in application technology security testing
 * Extensive experience in system technology security testing

## Description

The Principal of Cyber Security position at Ally is a member of the Information Protection and Risk Management team and works closely with other members of the IPRM program to develop and implement a comprehensive approach to the management of security risks at Ally. The Principal of Cyber Security role requires an individual with a strong technical background as well as an ability to work with the IT organization and business management to align priorities and plans with key business objectives. Responsible for providing technical guidance to staff as they work to accomplish company objectives. This is a mid-level to senior-level highly technical role.

The Work Itself

 * Work with the Director of Security Operations to ensure the security program addresses identified risks and business requirements.
 * Manage the process of gathering, analyzing and assessing the current and future threat landscape, as well as providing the Director of Security Operations with a realistic overview of risks and threats in the enterprise environment
 * Identify process improvement opportunities and develop subsequent plans of action to resolve gaps with minimal management intervention.
 * Monitor and report on compliance with security policies and standards, as well as the enforcement of policies within the IT department
 * Propose changes to existing policies and procedures to ensure operating efficiency and regulatory compliance.
 * Assist resource owners and IT staff in understanding and responding to security audit failures reported by auditors and regulatory bodies.
 * Provide security communication, awareness and training for audiences which may range from senior leaders to field staff.
 * Work as a liaison with vendors and the legal and purchasing departments to establish mutually acceptable contracts and service level agreements.
 * Manage production issues and incidents and participate in problem and change management forums.
 * Manage and coordinate operational components of incident management, including detection, response and reporting.
 * Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk.
 * Manage security projects and provide expert guidance on security matters for other IT projects.
 * Ensure audit trails, system logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements.
 * Design, coordinate and oversee security testing procedures to verify the security of systems, networks and applications, and manage the remediation of identified risks


## Related Videos

- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Web-based Information Visualization](https://www.wearedevelopers.com/videos/84-web-based-information-visualization)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [How software is steering vehicle technology](https://www.wearedevelopers.com/magazine/515-how-software-is-steering-vehicle-technology)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)