{"id":1960717,"url":"https://alion.io/job/hawk-chief-information-security-officer-ciso","title":"Chief Information Security Officer (CISO)","company":{"id":26763,"name":"Hawk","domain":"hawk.ai","url":"https://alion.io/company/hawk-ai","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Munich, Germany","Berlin, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":111000,"max_usd":269000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":269},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"GitHub","optional":false},{"name":"GitLab CI","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Red Teaming","optional":false},{"name":"SBOM","optional":false},{"name":"SOC 2","optional":false},{"name":"Zero Trust","optional":false},{"name":"Explainable AI","optional":true},{"name":"JavaScript","optional":true},{"name":"Node JS","optional":true}],"status":"live","first_seen_at":"2026-10-06T13:50:51Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-21T18:53:29Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"About Us\nHawk is the leading provider of AI-supported anti-money laundering and fraud detection technology. Banks and payment providers globally are using Hawk’s powerful combination of traditional rules and explainable AI to improve the effectiveness of their AML compliance and fraud prevention by identifying more crime while maximizing efficiency by reducing false positives. With our solution, we are playing a vital role in the global fight against Money Laundering, Fraud, or the financing of terrorism. We offer a culture of mutual trust, support and passion - while providing individuals with opportunities to grow professionally and make a difference in the world.\nHawk builds AI-powered financial crime detection (AML, transaction monitoring, and fraud prevention) for global tier-1 banks, payment processors, and high-growth fintechs. Because our platform analyzes real-time payment streams and sensitive financial data, security is not an administrative support function-it is our primary product promise.\nWe are looking for a technically grounded, hands-on CISO to own our global security posture end-to-end. This is a true player-coach leadership role. You will lead a dedicated team of four domain specialists while staying close enough to the technology to review cloud architecture, triage high-severity vulnerabilities, command critical incident responses first-hand, and debate technical security controls peer-to-peer with customer bank CISOs.\nWhy This Role Matters\nGlobal Regulatory Scrutiny at Scale: We operate across key financial hubs including Germany, the UK, the US, Singapore, and a growing roster of international markets. With DORA enforceable across the EU and heightened ICT risk rules globally, our banking clients expect documented operational resilience, continuous testing, and verified controls across all jurisdictions.\n\nModern Attack Surfaces & Supply Chain Threats: Our multi-tenant and single-tenant cloud environments (AWS/GCP) process massive transaction throughput. Alongside defending against emerging supply chain vulnerabilities-from open-source dependencies to third-party build pipelines-you will need to deeply understand our AI approach and actively help harden our tooling, harnesses, and pipelines.\n\nEnterprise Deal Velocity: Enterprise security reviews can either stall deals or close them. You will partner with our commercial teams to turn security questionnaires, risk mitigation, and architecture audits into enterprise trust and closed contracts.\n\nOrganizational Structure: The Four Domains\nYou will lead, mentor, and set technical direction for four specialized functional areas:\nApplication Security: Secure SDLC, automated CI/CD security gates (SAST/DAST/SCA), software supply chain defense, secure coding standards, AI harnesses and pipeline hardening.\n\nCorporate Security: Zero Trust architecture, IAM/SSO, distributed endpoint defense (EDR/XDR), threat hunting, infrastructure access.\n\nCompliance & Governance: DORA implementation, ISO 27001, SOC 2 Type II, Third-Party Risk Management (TPRM), multi-jurisdiction regulatory audits, risk registry ownership.\n\nData Protection: Solely dedicated to data protection: GDPR compliance, privacy governance, data subject rights, and statutory privacy regulatory requirements.\n\nCore Accountabilities\n1. Hands-On Technical Leadership, Engineering Integration & AI Hardening\nSecure Coding Standards & SDLC: Establish and enforce secure coding baselines directly within engineering workflows. Ensure automated vulnerability scanning, SBOM tracking, and security gates are integrated into GitHub/GitLab CI/CD pipelines.\n\nSoftware Supply Chain Defense: Protect build systems, dependencies, and deployment pipelines against supply chain tampering, compromised packages, and upstream vulnerabilities.\n\nAI Tooling & Pipeline Hardening: Deeply understand our AI approach and work closely with engineering to harden our systems. Personally evaluate and implement protective mechanisms-including secure AI harnesses, container sandboxing, and runtime guardrails around AI tooling and workflows.\n\nVulnerability Lifecycle Management: Set strict remediation SLAs for CVEs and cloud misconfigurations. Directly arbitrate vulnerability severity, triage zero-days, and collaborate with engineering leads to ensure rapid remediation without stalling release velocity.\n\nZero Trust & Cloud Infrastructure: Architect and drive our group-wide Zero Trust roadmap across AWS and GCP environments, enforcing least-privilege IAM policies, network micro-segmentation, and secure developer access.\n\n2. Commercial Trust & Customer Engagement\nPeer-to-Peer Customer Dialogue: Act as the senior technical authority in enterprise sales cycles, engaging directly with bank CISOs, InfoSec panels, and procurement leads to validate Hawk's architecture, threat models, and operational controls.\n\nAccelerating Enterprise Deal Velocity: Modernize vendor due diligence by replacing reactive security questionnaires with standardized evidence packages, continuous compliance portals, and pre-packaged architectural audits that win customer confidence quickly.\n\nConverting Security into a Value Driver: Turn our robust security baseline into a core sales differentiator, helping commercial teams demonstrate to prospect banks why Hawk's defense posture makes us their lowest-risk vendor.\n\n3. Risk Registry, Compliance & Governance Leadership\nCompany Risk Registry Ownership: Act as the executive owner of the company-wide Risk Registry. Go beyond cataloging risks: prioritize exposures dynamically, secure cross-functional executive buy-in to fund and execute mitigations, and transform risk management into concrete business enablement and revenue protection.\n\nThird-Party Risk Management (TPRM): Oversee vendor risk tiering, supply chain vetting, and continuous monitoring for third-party vendors and cloud sub-processors, executed directly through the Compliance function.\n\nAudit & Regulatory Leadership: Maintain existing ISO 27001 and SOC 2 Type II programs with zero major non-conformities across an expanding international perimeter.\n\nDORA Implementation: Enforce end-to-end compliance with the EU Digital Operational Resilience Act-specifically ICT risk management, third-party vendor oversight, operational resilience testing, and ICT incident reporting.\n\nMulti-Jurisdiction Alignment: Adapt policies proactively to meet global financial standards across the EU, UK, US, Singapore, and upcoming expansion markets.\n\nExecutive & Board Reporting: Translate technical cyber risks into clear business metrics (KRIs, risk heat maps, burn-down rates) for the CEO and Board of Directors.\n\n4. Frontline Incident Response & Operational Resilience\nFirst-Hand Incident Commander: Serve as the hands-on incident commander during Sev-1/Sev-2 security incidents. Lead technical investigations, root-cause analyses, log forensics, and technical debriefs directly alongside your team.\n\nBreach Notification & External Escalation: Direct regulator, law enforcement, and client communications within mandatory statutory windows under GDPR and DORA guidelines.\n\nTesting & Tabletop Drills: Design and execute technical red team engagements, threat-led penetration tests (TLPT), and crisis simulations with both technical engineers and the executive board.\n\n12-Month Success Metrics:\nCommercial Velocity: Enterprise bank security assessments clear with zero high-severity blockers, accelerating enterprise contract closures.\n\nProactive Risk Registry: The company risk registry is fully operationalized with executive buy-in, systematically driving down enterprise risk while supporting business expansion.\n\nRegulatory & Audit Record: DORA compliance program is operational; ISO 27001 and SOC 2 renew cleanly across all operating regions.\n\nEngineering & AI Hardening: Software supply chain security controls, secure coding standards, and AI harness guard rails are fully integrated into engineering CI/CD workflows.\n\nResilient Team Operations: The four-person security team executes with high autonomy, defined KPIs, and high cross-functional trust across the company.\n\nCandidate Profile:\nPractitioner Foundations: Proven background as a hands-on security practitioner (e.g., former security engineer, AppSec specialist, cloud security architect, or technical penetration tester) who has advanced into security leadership.\n\nPlayer-Coach Track Record: Demonstrated ability to manage and grow a small team of domain experts while personally reviewing technical configurations, auditing cloud policies, or investigating an alert.\n\nCommercial & CISO-to-CISO Fluency: Experience debating architecture, supply chain controls, and threat postures directly with enterprise bank CISOs and security evaluation boards to clear deal roadblocks.\n\nAI & Supply Chain Defense Fluency: Ability to quickly understand our AI architecture, implement hands-on controls to harden AI tooling (including AI harnesses and sandboxing), and protect CI/CD pipelines against software supply chain risks.\n\nRisk Registry Execution: Demonstrated ability to maintain a living risk registry, articulate risk trade-offs to non-technical executives, and rally engineering and commercial buy-in to remediate risks.\n\nFinTech & Regulated SaaS Background: Multi-year leadership experience in a B2B SaaS, FinTech, or banking platform handling sensitive financial or transactional data under regulatory oversight (e.g., DORA, ISO 27001, SOC 2, GDPR).\n\nTechnical Breadth: Strong practical understanding of AWS and GCP security primitives, container and Kubernetes security, modern IAM/SSO, API gateways, and EDR/XDR toolchains.\n\nBonus:\nIndustry certifications reflecting technical or managerial competence (e.g., CISSP, CISM, CCSP, OSCP).\n\nDirect experience securing real-time event-streaming architectures.\n\nGerman language proficiency (conversational or fluent) is a strong advantage.","description_format":"text","description_chars":9893,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"German","level":"Advanced (C1)","optional":true}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Fraud Detection","RegTech, AML & Compliance","Financial AI"],"lifecycle":[{"event":"open","at":"2026-10-06T15:11:59Z"}],"visa":[],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.891,"p_room":1,"age_days":14,"expected_fill_days":72,"reasons":["conf:1","velocity","win:early","comp:attention"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/hawk-chief-information-security-officer-ciso","json_url":"https://alion.io/job/hawk-chief-information-security-officer-ciso.json","meta":{"generated_at":"2026-10-21T19:26:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27505,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":26763},"rest":"https://alion.io/mcp/rest/get_company?id=26763"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhawk-chief-information-security-officer-ciso"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhawk-chief-information-security-officer-ciso"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhawk-chief-information-security-officer-ciso"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hawk-chief-information-security-officer-ciso\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhawk-chief-information-security-officer-ciso"}]}