VP, Security Operations

At Customers Bank, we believe in working hard, working smart, working together to deliver memorable customer experiences and having fun. Our vision, mission, and values guide us along our path to achieve excellence. Passion, attitude, creativity, integrity, alignment, and execution are cornerstones of our behaviors. They define who we are as an organization and as individuals. Everyone is encouraged to have personal development plans. By doing so, our team members are on their way to achieve their highest potential and be successful in their personal and professional lives.

This role is required to be ONSITE Monday through Thursday in Malvern, PA, with Friday remote.

Must be eligible to work in the U.S. without requiring sponsorship now or in the future.

Who is Customers Bank?

Founded in 2009, Customers Bank is a super-community bank with over $22 billion in assets. We believe in dedicated personal service for the businesses, professionals, individuals, and families we work with.

We get you further, faster. 

Focused on you:  We provide every customer with a single point of contact. A dedicated team member who’s committed to meeting your needs today and tomorrow.

On the leading edge:  We’re innovating with the latest tools and technology so we can react to market conditions quicker and help you get ahead.

Proven reliability:  We always ground our innovation in our deep experience and strong financial foundation, so we’re a partner you can trust.

Position Overview

The Vice President of Security Operations is responsible for developing, implementing, and managing the enterprise-wide security operations strategy for the institution. This role ensures the confidentiality, integrity, and availability of information assets, compliance with regulatory requirements, and resilience against emerging cyber threats. The VP will oversee the Security Operations Center (SOC), incident response, threat intelligence, vulnerability management, and vendor relationships.

What you’ll do:

• Program Leadership: Define and execute the security operations strategy aligned with business goals and regulatory obligations. Lead the security operations team, including SOC analysts, incident responders, and threat hunters. Provide executive-level reporting on risk posture, threats, and incident trends to senior leadership and the Board. Oversee and manage key security programs, including Security Operations Center (SOC), SIEM & EDR management, Systems hardening, Phishing governance, Firewall Change Review, Vulnerability Management, and penetration testing.
• Threat Intelligence Monitoring & Response: Lead security event monitoring, incident management, and response activities to safeguard systems against cyber threats.
• Device & Tool Administration: Manage, administer, and maintain security technologies under the SOC’s control, ensuring SLA compliance and process improvement. Evaluate endpoint security, network security controls and enhance their security.
• Analysis & Reporting: Develop dashboards, metrics, executive-level reports, and presentations to communicate risk, threats, and performance to senior leadership.
• Threat Modeling & Use Cases: Conduct threat modeling, identify attack vectors, and develop monitoring use cases, including oversight of penetration testing, incident response tabletop initiatives.
• Team & Vendor Management: Direct internal staff and external vendors, ensuring effective resource utilization and initiating corrective actions when necessary. Be relationship manager for Managed Security Service Provider supporting SOC team lead initiatives.
• ITIL asset and configuration management: Work with Bank IT governing Bank IT’s change management procedures supporting governance and reconciliation processes
• Risk & Compliance:  Collaborate with compliance and risk teams to ensure adherence to regulatory frameworks (FFIEC, GLBA, PCI-DSS, SOX, etc.). Support audits, examinations, and regulatory reviews related to information security. Foster a culture of security awareness across the institution.

What do you need?

• Must-Haves
  • Minimum 5 years’ experience in Security Operations (SOC, SIEM & EDR management, vulnerability management, penetration testing).
  • Hands-on experience with Cybersecurity Incident Response.
  • Proven management and leadership experience, including vendor oversight.
  • Strong background in security tool administration and program management, budget governance.
  • Professional certifications strongly preferred (CISSP, CISM, CISA