Viessmann Generations Group
Chief Information Security Officer (CISO) (m/w/x)
Vollzeitnur vor OrtManagement
München
Neuer Job?Nejo!
Dein persönlicher KI-Karriere-Agent
Nejo KI-Zusammenfassung
Securing AI-driven fraud detection tech for global banks. Hands-on security practitioner background required. CI/CD pipeline integration, build system protection, and AI hardening.
Deine Match-Analyse
von deinem Karriere-Agenten
Warum dieser Job zu dir passt
Mögliche Lücken
Tipps für deine Bewerbung
Anforderungen
- Hands-on security practitioner background
- Team management and growth ability
- Technical configuration review
- Cloud policy auditing
- Alert investigation
- CISO-to-CISO communication
- Architecture debate experience
- Supply chain controls discussion
- Threat posture discussion
- AI architecture understanding
- AI tooling hardening
- CI/CD pipeline protection
- Software supply chain risk mitigation
- Living risk registry maintenance
- Risk trade-off articulation
- Engineering and commercial buy-in
- B2B SaaS leadership experience
- FinTech leadership experience
- Banking platform leadership experience
- Handling sensitive financial data
- Regulatory oversight experience
- AWS security primitives understanding
- GCP security primitives understanding
- Container security understanding
- Kubernetes security understanding
- Modern IAM understanding
- Modern SSO understanding
- API gateways understanding
- EDR toolchain understanding
- XDR toolchain understanding
- CISSP certification
- CISM certification
- CCSP certification
- OSCP certification
- Securing real-time event-streaming architectures
- German language proficiency
Aufgaben
- Lead, mentor, and set technical direction for four specialized functional areas
- Establish and enforce secure coding baselines within engineering workflows
- Integrate automated vulnerability scanning, SBOM tracking, and security gates into CI/CD pipelines
- Protect build systems, dependencies, and deployment pipelines from tampering
- Harden AI systems and evaluate/implement protective mechanisms
- Implement secure AI harnesses, container sandboxing, and runtime guardrails
- Set remediation SLAs for CVEs and cloud misconfigurations
- Arbitrate vulnerability severity and triage zero-days
- Collaborate with engineering leads on rapid vulnerability remediation
- Architect and drive Zero Trust roadmap across AWS and GCP
- Enforce least-privilege IAM policies and network micro-segmentation
- Ensure secure developer access
- Act as senior technical authority in enterprise sales cycles
- Engage directly with bank CISOs, InfoSec panels, and procurement leads
- Validate architecture, threat models, and operational controls
- Modernize vendor due diligence with standardized evidence packages
- Implement continuous compliance portals and pre-packaged architectural audits
- Demonstrate security posture as a sales differentiator
- Act as executive owner of the company-wide Risk Registry
- Prioritize exposures dynamically and secure executive buy-in for mitigations
- Oversee vendor risk tiering, supply chain vetting, and continuous monitoring
- Maintain ISO 27001 and SOC 2 Type II programs
- Enforce end-to-end compliance with the EU Digital Operational Resilience Act
- Manage ICT risk, third-party oversight, operational resilience testing, and incident reporting
- Adapt policies to meet global financial standards
- Translate technical cyber risks into business metrics for executive reporting
- Serve as hands-on incident commander during security incidents
- Lead technical investigations, root-cause analyses, and log forensics
- Direct regulator, law enforcement, and client communications
- Design and execute technical red team engagements and penetration tests
- Design and execute crisis simulations
- Ensure enterprise bank security assessments clear with zero high-severity blockers
- Systematically drive down enterprise risk while supporting business expansion
- Ensure DORA compliance program is operational
- Ensure ISO 27001 and SOC 2 renew cleanly across all operating regions
- Integrate software supply chain security controls, secure coding standards, and AI harness guardrails into CI/CD workflows
- Ensure the security team executes with high autonomy and defined KPIs
Berufserfahrung
ca. 4 - 6 Jahre
Ausbildung
Bachelor-AbschlussODER
Master-Abschluss
Sprachen
Deutsch – Grundkenntnisse
Tools & Technologien
AWSGCPKubernetesIAMSSOAPI gatewaysEDRXDRCISSPCISMCCSPOSCP
Von Nejo automatisch aufbereitet
Nejo hat diesen Job automatisch von der Website des Unternehmens Hawk erfasst und die Informationen auf Nejo mit Hilfe von KI für dich aufbereitet. Trotz sorgfältiger Analyse können einzelne Informationen unvollständig oder ungenau sein. Bitte prüfe immer alle Angaben in der Originalanzeige! Inhalte und Urheberrechte der Originalanzeige liegen beim ausschreibenden Unternehmen.
Zur Originalanzeige bei HawkÜber das Unternehmen
HA
FinancialServicesMünchen
The company is the leading provider of AI-supported anti-money laundering and fraud detection technology.
Wie gut ist dein Lebenslauf?
Nejo bewertet ihn, und bringt ihn danach gemeinsam mit dir in Bestform.
Du hast noch keinen Lebenslauf?
Noch nicht perfekt?
- Carl Zeiss AGSecurity Architect - AI (m/w/x)Vollzeitnur vor OrtSeniorMünchen
- FI-TSSenior Architekt Cyber Security (m/w/x)Vollzeitnur vor OrtSeniorFellbach, Haar, Offenbach am Main
- recruitIT ConsultingAbteilungsleitung Datenschutz / Informationssicherheit (m/w/x)Vollzeitnur vor OrtSeniorMünchen
- DataGuardEnterprise Customer Success Manager (m/w/x)Vollzeitnur vor OrtBerufserfahrenMünchen