12 дней назад
CISO (AI/Fintech)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
CISO (AI/Fintech): Owning Hawk AI’s global security posture across AI-powered financial crime detection platforms with an accent on cloud security, software supply chain defense, regulatory compliance, and enterprise customer trust. Focus on hardening AI tooling and CI/CD pipelines, leading critical incident response, implementing DORA and Zero Trust controls, and translating cyber risk into executive and commercial outcomes.
Location: Munich or Berlin, Germany
Company
provides AI-supported anti-money laundering, transaction monitoring, and fraud prevention technology for banks, payment providers, and fintechs.
What you will do
- Own the global security posture and lead a four-person team across application security, corporate security, compliance and governance, and data protection.
- Set secure coding standards and integrate vulnerability scanning, SBOM tracking, and security gates into GitHub and GitLab CI/CD pipelines.
- Harden AI tooling, harnesses, containers, runtime guardrails, build systems, dependencies, and software supply chains.
- Drive Zero Trust architecture, least-privilege IAM, network micro-segmentation, and secure developer access across AWS and GCP.
- Act as the senior security authority in enterprise sales cycles and engage directly with bank CISOs, security panels, and procurement teams.
- Lead risk management, regulatory audits, Sev-1 and Sev-2 incident response, breach escalation, red-team exercises, threat-led penetration tests, and crisis simulations.
Requirements
- Hands-on security practitioner background with progression into security leadership.
- Experience managing and developing a small team while personally reviewing technical configurations, cloud policies, and security alerts.
- Experience with AI security, software supply chain defense, CI/CD security, AWS, GCP, containers, Kubernetes, IAM/SSO, API gateways, and EDR/XDR.
- Leadership experience in B2B SaaS, fintech, or banking platforms handling sensitive financial or transactional data under regulatory oversight.
- Practical experience with DORA, ISO 27001, SOC 2 Type II, GDPR, third-party risk management, and multi-jurisdiction regulatory requirements.
- Experience securing real-time event-streaming architectures and communicating cyber risk to executives, boards, and enterprise customers.
Nice to have
- Industry certifications such as CISSP, CISM, CCSP, or OSCP.
- Conversational or fluent German.
Culture & Benefits
- Work in a culture based on mutual trust, support, and professional growth.
- Contribute to technology used in the global fight against money laundering, fraud, and terrorist financing.
- Partner with engineering, commercial teams, executives, and customer security leaders across international markets.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →