Cloud Security Specialist

At Customers Bank, we believe in working hard, working smart, working together to deliver memorable customer experiences and having fun. Our vision, mission, and values guide us along our path to achieve excellence. Passion, attitude, creativity, integrity, alignment, and execution are cornerstones of our behaviors. They define who we are as an organization and as individuals. Everyone is encouraged to have personal development plans.

By doing so, our team members are on their way to achieve their highest potential and be successful in their personal and professional lives.

Must be legally eligible to work in the United States without sponsorship, now or in the future, to be considered.

Founded in 2009, Customers Bank is a super-community bank with over $22 billion in assets. We believe in dedicated personal service for the businesses, professionals, individuals, and families we work with.
** We get you further, faster.
**** Focused on you:
** We provide every customer with a single point of contact. A dedicated team member who’s committed to meeting your needs today and tomorrow.
** On the leading edge:
** We’re innovating with the latest tools and technology so we can react to market conditions quicker and help you get ahead.
** Proven reliability:
** We always ground our innovation in our deep experience and strong financial foundation, so we’re a partner you can trust.
** What You’ll Do
** We are seeking an experienced and motivated Cloud Security Specialist is accountable for evaluating the Bank’s cloud security posture, cloud environment (Azure and Office) and overall security. They are responsible for implementing proactive security initiatives in the Bank’s cloud and email environments and the discovery of sensitive data and ensuring DLP strategies are deployed.

This position requires the candidate to have knowledge in configuring and implementation of different Azure and Microsoft Defender (CASB) tools/solutions.
*
* Key Responsibilities:

*** Develop, implement, and maintain cloud security strategies, policies, and standards across the organization.
* Integrate security best practices into multi-cloud and hybrid environments (e.g., AWS, Azure, GCP).
* Monitor cloud environments for security threats, vulnerabilities, and breaches.
* Respond to security incidents by identifying root causes, mitigating risks, and coordinating corrective measures.
* Collaborate with the Incident Response team to analyze cloud-specific threats and resolve issues promptly.
* Conduct risk assessments for cloud platforms and services to identify and mitigate potential security threats.
* Ensure compliance with industry standards, regulations, and frameworks (e.g., ISO 27001, SOC 2, NIST, CIS benchmarks).
* Provide security guidance to ensure adherence to organizational security policies.
* Implement least privilege principles and ensure secure authentication and authorization mechanisms.
* Assist in securing cloud infrastructure services, including storage, compute, containers, and networks.
* Assist in supporting cloud security log monitoring architecture, design and implementation activities
* Develop and deploy automated security solutions for continuous monitoring, threat detection, and configuration management.
* Perform regular audits to ensure effective use of security tools and technologies.
* Implement remediations and proactive measures to address vulnerabilities and misconfigurations.
* Collaborate with cross-functional teams (e.g., Dev Ops, IT, compliance) to embed security into cloud projects and initiatives.
* Educate staff and stakeholders on cloud security risks, technologies, and best practices.
* Document cloud security policies, processes, and incidents.
* Generate reports for stakeholders, summarizing cloud security posture, risks, and improvements.
* Stay up-to-date with evolving cloud security trends, technologies, and threats.
* Provide recommendations to enhance the overall cloud security posture and align with organizational goals.
** Suggested Skills
*** Financial industry experience
* Knowledge of Cloud/Azure best security practices, DLP and how to configure best practices for data protection and how to discover…