Jr. Information Security Analyst (Controls Testing)
About the position At Customers Bank, we believe in working hard, working smart, working together to deliver memorable customer experiences and having fun. Our vision, mission, and values guide us along our path to achieve excellence. Passion, attitude, creativity, integrity, alignment, and execution are cornerstones of our behaviors. They define who we are as an organization and as individuals. Everyone is encouraged to have personal development plans. By doing so, our team members are on their way to achieve their highest potential and be successful in their personal and professional lives. This role is required to be ONSITE in Malvern, PA Monday through Thursday with Friday remote. Must be eligible to work in the U.S. without requiring sponsorship now or in the future. Who is Customers Bank? Founded in 2009, Customers Bank is a super-community bank with over $22 billion in assets. We believe in dedicated personal service for the businesses, professionals, individuals, and families we work with. We get you further, faster. Focused on you: We provide every customer with a single point of contact. A dedicated team member who's committed to meeting your needs today and tomorrow. On the leading edge: We're innovating with the latest tools and technology so we can react to market conditions quicker and help you get ahead. Proven reliability: We always ground our innovation in our deep experience and strong financial foundation, so we're a partner you can trust. Responsibilities • Control Testing & Evaluation: Assist in definition of and execute testing procedures to assess the design and effectiveness of key internal controls across business units, technology, and operational processes. • Risk & Compliance Alignment: Ensure testing activities are aligned with regulatory standards (SOX, FFIEC, FDIC, etc.) and internal policies. • Issue Identification & Reporting: Document test results, identify control deficiencies, and provide clear recommendations for remediation. • Collaboration: Work closely with business process owners, auditors, compliance, and risk teams to ensure timely resolution of identified issues. • Process Improvement: Recommend enhancements to testing methodologies, control design, and risk management practices to strengthen the bank's control environment. Maintain awareness of industry regulatory environment and threat landscape. • Documentation & Communication: Prepare executive-ready reports, dashboards, and presentations for senior management and regulators, and information technology peers. • Continuous Monitoring: Participate in ongoing monitoring and follow-up activities to confirm remediation effectiveness and sustainability. Requirements • 3+ years of experience in internal audit, compliance testing, risk management, or internal controls. • Strong knowledge of information security and IT risk control frameworks (e.g., COSO, COBIT, NIST). • Understanding of financial, operational, and IT control environments. • Strong analytical skills with attention to detail and accuracy. • Excellent written and verbal communication skills with the ability to present complex findings clearly. • Bachelor's degree in information systems, or related field. • Risk and control assessments in highly regulated environments • Understanding of information technology infrastructure (networking, Active Directory, backups, etc.) • Process analysis and documentation. • Strong interpersonal skills to work across departments. • Proficiency with Microsoft Office applications (Excel, Word, PowerPoint). • Develop and maintain working relationships with audit, GRC, and IT teams to promote continuous control awareness and improvements. Nice-to-haves • Professional certifications such as CIA, CISSP, CISA, Microsoft certifications, or CRMA. • Experience with GRC (Governance, Risk, and Compliance) tools. • Banking or financial services industry experience Apply tot his job