Security by Design: How Ally Financial’s CISO Builds Resiliency Into the Cloud
Technovation with Peter High (CIO, CTO, CDO, CXO Interviews)Show Notes
A digital-only bank can’t afford to retrofit security. Ally Financial builds it in from the start.
In this episode of Technovation, Peter High speaks with Spencer Cremers, Chief Information Security Officer at Ally Financial, about designing security and resiliency into cloud infrastructure by default — and what that requires organizationally.
Cremers spent 20+ years at Ally progressing through divisional CIO and engineering roles before becoming CISO, including a stretch as interim Chief Information and Data Officer. That delivery background shapes how he positions security: not as a gatekeeper handing down requirements late in the cycle, but as a design partner embedded from the start.
Key Highlights:
Why Ally’s cloud environment uses templatized resiliency patterns so application teams inherit security standards automatically
How a three-bucket framework separates AI-in-defenses, AI-enabled external threats, and governing Ally’s own AI use
What Cremers learned running a three-day, CEO-involved crisis simulation with concurrent threat vectors
Why a CISO with a delivery background can dismantle the adversarial dynamic between security and engineering
How Cremers managed the interim CIDO role without putting the organization into a holding pattern
This episode is sponsored by Tines. Freedom to build. Complete security. No compromises. Learn more at tines.io
More from Technovation with Peter High (CIO, CTO, CDO, CXO Interviews)
AI layered onto a broken process doesn’t fix the process; it just runs it faster. Prakash Kota spent his first 18 months at UKG consolidating two legacy companies into unified CRM, ERP, and data systems before any AI conversation began. Now, as Chief Transformation Officer, he is shifting the question from “what tools can we deploy?” to “what outcome are we trying to reach?” That discipline extends to the customer funnel, where AI-assembled signals travel with a prospect through every handoff, and to sales reps, where an autonomous assistant pushes pre-meeting briefs before a rep has to ask, reclaiming the 40–50% of call-prep time currently spent on research.
The binding constraint on AI adoption is not access to tools. It is the organizational fear and mindset shift required to reimagine work entirely.
Healthcare has accumulated friction that patients have come to accept as normal. Novant Health’s Chief AI Officer is systematically dismantling it.
Most generative AI programs stall at the pilot stage. Zoetis reached 95% computer-based colleague adoption.
The next generation of technology giants may not be built in software. They may be built in factories.