below marketmost similar roles pay hereabove market
This role pays less than
82%
of similar roles. Most pay
$193,622–$261,162
— the blue band above.
At the midpoint, this role pays about
$185k
versus about
$227k
for comparable roles.
Based on 240 similar postings.
Employer
About Ally Financial
Ally Financial is a US-based digital financial services company offering online banking, auto financing, mortgage, and investment products. It is one of the largest all-digital banks in the United States.
Ally Financial currently has
28 open roles
on FindRole.
Listed pay typically runs
$110,000–$180,000
across 27 roles with salary data.
The Director, Customer Identity & Access Management - CIAM leads the strategy, roadmap, and execution of the customer authentication and identity portfolio. This leader owns the end-to-end strategy, policy, and performance of customer authentication across mobile, web, and contact center channels. Key responsibilities include managing omnichannel capabilities such as MFA, passkeys, passwordless, biometrics, account recovery, and risk-based authentication while balancing fraud risk, security, and customer experience. The role requires partnering with Fraud, Cybersecurity, and Engineering teams to translate threat trends into actionable product decisions. Necessary skills include expertise in OAuth 2.0, OpenID Connect, FIDO2, and NIST standards. The position solves complex identity problems in a regulated banking environment, specifically managing ongoing customer authentication, session trust, and fraud prevention for returning customers across digital and assisted-service journeys.
Own the end-to-end strategy, policy, and performance of customer authentication across mobile, web, and contact center channels.
Define the customer authentication policy and decision framework for login, step-up, recovery, and session trust.
Own the cross-channel authentication roadmap and business requirements, including MFA, biometrics, and passwordless flows.
Direct authentication decisioning strategy by specifying the signals, controls, and vendor capabilities required for access.
Steer Fraud Data & Analytics and Engineering teams on rules, models, tooling, and platform enhancements.
Maintain the inventory of CIAM risks and mapped controls while incorporating fraud investigations and external threat intelligence.
Evaluate and pilot new authentication capabilities and data sources to strengthen controls against emerging threats.
Define clear handoffs with adjacent identity teams to distinguish between initial identity verification and ongoing session trust.
What we're looking for
Bachelor’s degree in Business, Technology, Computer Science, Information Systems, or a related field, or equivalent practical experience.
High school Diploma or GED equivalent.
Minimum of 9+ years of relevant experience or an equivalent combination of education and experience.
10+ years of experience in banking or fintech as a fraud/identity leader with direct ownership of customer authentication and account takeover controls.
Demonstrated expertise in fraud prevention, identity strategy, customer authentication, account takeover mitigation, and digital/customer risk management.
Proven experience defining strategy and leading execution for enterprise-scale authentication, identity, or fraud-related capabilities.
Deep familiarity with standards such as MFA, SSO, OAuth 2.0, OpenID Connect, FIDO2, passkeys, biometrics, device binding, and FFIEC/NIST.
Experience leading CIAM, IAM, authentication, digital identity, fraud prevention, or customer security product teams.