> Markdown version of [/jobs/ext/537693-3rd-party-application-manager](https://www.wearedevelopers.com/jobs/ext/537693-3rd-party-application-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # 3rd Party Application Manager - **Company:** Ally Financial Inc. - **Location:** Charlotte, NC, United States (Remote available) - **Experience:** Expert - **Salary:** $90,000.0 - $150,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Audit Trail, Business Software, Computer-Aided Audit Tools, Programming Tools, Identity and Access Management, Issue Tracking Systems, Information Technology Audit, Runbook, Software Engineering, User Provisioning Software, Software Vulnerability Management, Enterprise Software Applications, Customer Identity Access Management, Information Technology, Guidewire BillingCenter, Servicenow, Dynamic Application Security Testing - **Published:** June 13, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=9063966b4361b720 ## About the Role Do you have experience in Vendor relationship building?, Do you have a High school diploma or GED?, * 7+ years of relevant experience or equivalent combination of education and experience * High school Diploma or GED equivalent, * At least 5+ years of IT infrastructure experience preferred. * Bachelor's degree in Computer Science or related field preferred. * Experience supporting IT audits and compliance initiatives (FRB, SOX, PCI, internal controls). * Experience coordinating with third-party vendors for application support, upgrades, and issue resolution. * Proficiency in working with ticketing systems (ServiceNow), audit tools, and user provisioning platforms. * Broad and deep understanding of technical concepts in multiple specialized fields to develop technical solutions with a consultative approach. * Strong knowledge of all aspects of the development life cycle and an exposure to various current software development methodology approaches. * Proficiency with incident management, root cause analysis and resolving production application issues with both short term and long-term solutions. * Proficient with standard development tools. * Proficiency with AI tooling (i.e. Claude Code, Codex) * Ability to multi-task in a fast-paced environment while prioritizing work items appropriately. * Ability to manage and support enterprise business applications by leveraging internal and external teams along with third-party vendor solution. ## Description The Application Manager partners with all stakeholders to oversee a portfolio of third-party and business-managed applications, ensuring each solution aligns with enterprise technology, security, and compliance standards. This role serves as the central liaison between vendors, business teams, and IT to drive operational health, risk management, and lifecycle governance for all supported applications. The foundation of this role is flawless execution of risk, compliance, and governance responsibilities. As you build mastery of the controls and routines, you will be encouraged to identify opportunities where AI tools and automation can enhance quality and efficiency - always with a risk-aware lens. We believe the best application managers understand their controls deeply enough to know what can be safely optimized and what requires human judgment. At this time, Ally will not sponsor a new applicant for employment authorization for this position. The Work Itself Core Responsibilities - Keeping the Train Moving * Own end-to-end governance of a portfolio of third-party and business-managed applications * Ensure compliance with enterprise standards across 12+ critical control areas: IAM, Monitoring/Response/Recovery, Data Protection, Vulnerability Management, Third-Party Risk, BC/DR, Change Management, EA, EUC, PCI, Documentation/Runbooks, and Digital Customer Authentication * Execute and manage recurring compliance routines: Enterprise Access Compliance (EAC) reviews, Privileged Access Management (PAM), application risk self-assessments, catalog attestations, DAST scanning, DR reviews, EOL tracking, and vulnerability management * Serve as the primary interface with third-party vendors for support, upgrades, SLA adherence, and issue resolution * Support internal and external audits (FRB, SOX, PCI, TSD Risk, Centralized Testing) by providing required documentation and evidence * Partner with Enterprise Architecture, all Orgs on application catalog governance, knowledge transfer, and ServiceNow record accuracy * Maintain complete, audit-ready documentation at all times - no gaps, no excuses, no surprises during exam periods Continuous Improvement & AI Adoption (Parallel Growth Track) As you build confidence in the compliance fundamentals, you will progressively adopt AI and automation to work more effectively: * Phase 1 - Learn the controls: Master the compliance routines, understand the "why" behind each control, and execute flawlessly in the current operating model * Phase 2 - Identify the toil: Recognize which tasks are repetitive, time-consuming, and low-judgment - candidates for safe automation * Phase 3 - Automate with guardrails: Leverage AI tools (e.g., Claude Code, scripting, workflow automation) to reduce manual effort while maintaining audit trail integrity, data sensitivity awareness, and human-in-the-loop oversight where required Examples of where AI can safely augment this role: - Generating compliance documentation and attestation prep materials - Automating access review data collection and formatting - Accelerating vendor status tracking and SLA reporting - Synthesizing knowledge across application ecosystems for faster onboarding What remains human-judgment territory: - Access approval decisions involving sensitive data or PII - Audit evidence interpretation and risk acceptance decisions - Vendor relationship management and escalation judgment calls - Any control activity where regulatory accountability requires a named individual ## Related Videos - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Resilient by Design: Building Robust Architectures in High-Stakes Financial Systems](https://www.wearedevelopers.com/videos/2106-resilient-by-design-building-robust-architectures-in-high-stakes-financial-systems) - [Agentic employees in world's most downloaded FinTech app](https://www.wearedevelopers.com/videos/100123-agentic-employees-in-world-s-most-downloaded-fintech-app) - [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [How software is steering vehicle technology](https://www.wearedevelopers.com/magazine/515-how-software-is-steering-vehicle-technology) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [What Industries Outside of AI Are Hiring The Most AI Experts?](https://www.wearedevelopers.com/magazine/98-what-industries-outside-of-ai-are-hiring-the-most-ai-experts)