(Senior) Information Security Officer (German)

The role

The (Senior) Information Security Officer will support pre-sales and sales engagements by responding to security questionnaires and RFPs. They will also manage the ISMS to ensure compliance with ISO 27001 and monitor the security posture of corporate tools and infrastructure.

What you will do

• Respond to security questionnaires, RFPs, and due-diligence requests
• Participate in customer calls to explain security posture
• Represent security capabilities to regulated financial institutions
• Support the operation and improvement of the ISMS
• Assist in internal audits, evidence gathering, and risk assessments
• Maintain certification readiness through documentation and process adherence
• Monitor security posture of corporate tools, infrastructure, and integrations
• Support vendor assessments and due diligence
• Collaborate with Engineering, IT, and InfoSec to strengthen security baselines
• Translate technical security concepts for diverse audiences

Required qualifications

• 5+ years of hands-on experience in Information Security, IT Security, or a related GRC role within a B2B tech or SaaS environment
• Proven experience operating and improving an ISMS aligned to ISO 27001
• Working knowledge of SOC 2, DORA, and NIS 2
• Solid understanding of IT security fundamentals: authentication, endpoint security, encryption, network basics
• Good technical competence across multiple operating systems (macOS, Windows, Linux)
• Experience coordinating with external auditors, certification bodies, and regulators
• Fluent German and English

Nice to have

• ISO 27001 Lead Implementer/Auditor, CISSP, CISM, CRISC, CompTIA Security+
• Experience with identity and access management tools (e.g., JumpCloud, Okta), MDM solutions, and enterprise security platforms
• Exposure to 3rd-party risk management, vendor security assessments, or SaaS security tooling
• Experience supporting security questionnaires, RFPs, or due-diligence calls with regulated financial customers
• Familiarity with data protection requirements (GDPR) in a security context

About the company

Hawk is the leading provider of AI-supported anti-money laundering and fraud detection technology. They offer a culture of mutual trust, support and passion.