Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Chief Information Security Officer (CISO) role.

Rezi rewrites your resume against Hawk's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Chief Information Security Officer (CISO) posting at Hawk — free, in seconds.

About the Role

Hawk is seeking a technically grounded, hands-on CISO to own the global security posture end-to-end. This player-coach leadership role involves leading a team of four domain specialists while staying close to the technology to review cloud architecture, triage vulnerabilities, command incident responses, and engage with customer CISOs.

Responsibilities

Establish and enforce secure coding baselines directly within engineering workflows.
Ensure automated vulnerability scanning, SBOM tracking, and security gates are integrated into GitHub/GitLab CI/CD pipelines.
Protect build systems, dependencies, and deployment pipelines against supply chain tampering, compromised packages, and upstream vulnerabilities.
Deeply understand AI approach and work closely with engineering to harden systems.
Personally evaluate and implement protective mechanisms for AI tooling and workflows.
Set strict remediation SLAs for CVEs and cloud misconfigurations.
Directly arbitrate vulnerability severity, triage zero-days, and collaborate with engineering leads to ensure rapid remediation.
Architect and drive the group-wide Zero Trust roadmap across AWS and GCP environments.
Enforce least-privilege IAM policies, network micro-segmentation, and secure developer access.
Act as the senior technical authority in enterprise sales cycles, engaging directly with bank CISOs, InfoSec panels, and procurement leads.
Modernize vendor due diligence by replacing reactive security questionnaires with standardized evidence packages.
Turn robust security baseline into a core sales differentiator.
Act as the executive owner of the company-wide Risk Registry.
Prioritize exposures dynamically and secure cross-functional executive buy-in to fund and execute mitigations.
Oversee vendor risk tiering, supply chain vetting, and continuous monitoring for third-party vendors.
Maintain existing ISO 27001 and SOC 2 Type II programs.
Enforce end-to-end compliance with the EU Digital Operational Resilience Act (DORA).
Adapt policies proactively to meet global financial standards across the EU, UK, US, Singapore, and upcoming expansion markets.
Translate technical cyber risks into clear business metrics for the CEO and Board of Directors.
Serve as the hands-on incident commander during Sev-1/Sev-2 security incidents.
Lead technical investigations, root-cause analyses, log forensics, and technical debriefs.
Direct regulator, law enforcement, and client communications within mandatory statutory windows.
Design and execute technical red team engagements, threat-led penetration tests, and crisis simulations.

Requirements

Proven background as a hands-on security practitioner (e.g., former security engineer, AppSec specialist, cloud security architect, or technical penetration tester) who has advanced into security leadership.
Demonstrated ability to manage and grow a small team of domain experts while personally reviewing technical configurations, auditing cloud policies, or investigating an alert.
Experience debating architecture, supply chain controls, and threat postures directly with enterprise bank CISOs and security evaluation boards.
Ability to quickly understand AI architecture, implement hands-on controls to harden AI tooling, and protect CI/CD pipelines against software supply chain risks.
Demonstrated ability to maintain a living risk registry, articulate risk trade-offs to non-technical executives, and rally engineering and commercial buy-in to remediate risks.
Multi-year leadership experience in a B2B SaaS, FinTech, or banking platform handling sensitive financial or transactional data under regulatory oversight (e.g., DORA, ISO 27001, SOC 2, GDPR).
Strong practical understanding of AWS and GCP security primitives, container and Kubernetes security, modern IAM/SSO, API gateways, and EDR/XDR toolchains.

Skills

Application Security
Corporate Security
Compliance & Governance
Data Protection
Secure SDLC
Automated CI/CD security gates (SAST/DAST/SCA)
Software supply chain defense
Secure coding standards
AI harnesses and pipeline hardening
Zero Trust architecture
IAM/SSO
Distributed endpoint defense (EDR/XDR)
Threat hunting
Infrastructure access
DORA implementation
ISO 27001
SOC 2 Type II
Third-Party Risk Management (TPRM)
Multi-jurisdiction regulatory audits
Risk registry ownership
GDPR compliance
Privacy governance
Data subject rights
Statutory privacy regulatory requirements
Vulnerability Lifecycle Management
Cloud Infrastructure Security
Commercial Trust
Customer Engagement
Risk Management
Incident Response
Operational Resilience
AWS Security
GCP Security
Container Security
Kubernetes Security
API Gateway Security
CISSP
CISM
CCSP
OSCP
Real-time event-streaming architectures

Location

Germany
UK
US
Singapore

Work Type

Full-time

Experience Level

Leadership
Senior

About the Company

Hawk is the leading provider of AI-supported anti-money laundering and fraud detection technology.
Banks and payment providers globally use Hawk’s powerful combination of traditional rules and explainable AI to improve AML compliance and fraud prevention.
Hawk's solution plays a vital role in the global fight against Money Laundering, Fraud, and the financing of terrorism.
Hawk offers a culture of mutual trust, support, and passion, providing individuals with opportunities to grow professionally and make a difference.
Hawk builds AI-powered financial crime detection (AML, transaction monitoring, and fraud prevention) for global tier-1 banks, payment processors, and high-growth fintechs.
Security is Hawk's primary product promise due to the platform analyzing real-time payment streams and sensitive financial data.