← All roles

Chief Information Security Officer (CISO)

Hawk· Engineering & Development
Apply on company site
Munich, BerlinFull-timePosted 2w ago

About the role

Technically grounded, hands-on CISO leading Hawk's global security posture end-to-end with a player-coach approach. Directly manage four domain specialists across Application Security, Corporate Security, Compliance & Governance, and Data Protection to protect AI-powered financial crime detection platform in multi-cloud environments (AWS/GCP) for global financial customers.

Responsibilities

  • Hands-On Technical Leadership, Engineering Integration & AI Hardening: secure coding standards, SDLC integration, software supply chain defense, AI tooling hardening, vulnerability lifecycle management, zero trust & cloud infrastructure.
  • Commercial Trust & Customer Engagement: act as senior technical authority in enterprise sales cycles, accelerate deal velocity with standardized evidence packages and audits, translate security into a value driver for customers.
  • Risk Registry, Compliance & Governance Leadership: own company risk registry, oversee third-party risk management, maintain ISO 27001 and SOC 2 Type II programs, implement DORA, align multi-jurisdiction policies, executive board reporting.
  • Frontline Incident Response & Operational Resilience: lead Sev-1/Sev-2 incident response, breach notification under GDPR/DORA, conduct red team and tabletop exercises.

Qualifications

  • Hands-on security practitioner background (e.g., security engineer, AppSec, cloud security architect, or pen tester) who advanced to leadership
  • Experience managing a small team of domain experts while reviewing technical configurations and cloud policies
  • Fluent in engaging with enterprise bank CISOs and security evaluation boards to clear deals
  • Ability to understand and harden AI tooling and CI/CD pipelines; supply chain defense expertise
  • Experience maintaining risk registry, communicating risk trade-offs to executives
  • Multi-year leadership in FinTech/B2B SaaS/regulatory environment (DORA, ISO 27001, SOC 2, GDPR)
  • Strong understanding of AWS/GCP security primitives, container/Kubernetes security, IAM/SSO, API gateways, EDR/XDR toolchains
  • German language proficiency is a strong advantage

Skills

Required:Secure SDLCSoftware Supply Chain DefenseAI Tooling & Pipeline HardeningVulnerability Lifecycle ManagementZero Trust & Cloud InfrastructureThreat & Incident Response

Benefits

  • Not specified in the description of benefits.
Last updated Oct 14, 2026. Interested? Apply on the company site.

About Hawk

Increase your risk coverage. Improve efficiency.

Award-winning AML & CFT technology powered by explainable AI increases your risk coverage, helps you identify more crime, and reduces your false positives.

AMLCFTfinancial crimeexplainable AItransaction monitoringpayment screeningcustomer screeningrisk rating
Company profileWebsite

More open roles at Hawk