Chief Information Security Officer (CISO)

The role

You will lead a four-person security team as a player-coach to own the global security posture. You will manage application security, corporate security, compliance, and data protection while hardening AI tooling and cloud infrastructure.

What you will do

• Establish and enforce secure coding baselines within engineering workflows
• Protect build systems and deployment pipelines against supply chain risks
• Harden AI systems using secure AI harnesses and container sandboxing
• Manage the vulnerability lifecycle and remediation SLAs
• Architect and drive a Zero Trust roadmap across AWS and GCP
• Engage with bank CISOs to validate architecture and threat models
• Own the company-wide Risk Registry and prioritize mitigations
• Oversee third-party risk management and vendor vetting
• Maintain ISO 27001 and SOC 2 Type II programs
• Serve as hands-on incident commander for high-severity security incidents

Required qualifications

• Proven background as a hands-on security practitioner
• Demonstrated ability to manage and grow a small team of domain experts
• Experience debating architecture and threat postures with enterprise bank CISOs
• Ability to implement hands-on controls to harden AI tooling and protect CI/CD pipelines
• Demonstrated ability to maintain a living risk registry
• Multi-year leadership experience in a B2B SaaS, FinTech, or banking platform handling sensitive financial or transactional data under regulatory oversight
• Strong practical understanding of AWS and GCP security primitives
• Strong practical understanding of container and Kubernetes security
• Strong practical understanding of modern IAM/SSO, API gateways, and EDR/XDR toolchains

Nice to have

• Industry certifications (e.g., CISSP, CISM, CCSP, OSCP)
• Direct experience securing real-time event-streaming architectures
• German language proficiency

About the company

Hawk is a provider of AI-supported anti-money laundering and fraud detection technology for banks and payment providers. The company builds AI-powered financial crime detection for global tier-1 banks, payment processors, and high-growth fintechs.