White-Hat Hacker / Fractional CISO

VERU 365 is an early-stage startup building a white-label AI financial co-pilot for banks and wealth firms. The business is at the stage where bank security and vendor-risk teams are asking hard questions, and the company needs an experienced security leader who has navigated those conversations before. The role carries genuine technical depth: reviewing a Google Cloud stack (Cloud Run, Cloud SQL Postgres with pgvector, Vertex AI, IAM, Cloud Armor), assessing per-tenant data isolation, and advising on authentication and authorisation for a B2B product where each bank manages its own users.

Beyond architecture review, the fractional CISO will lead SOC 2 readiness through to audit, join bank due-diligence and penetration test review calls, and help the team respond accurately to vendor-management questionnaires. Time commitment is a few hours per week, with increased availability around audits and significant bank meetings.

• Review multi-tenant Google Cloud architecture and identify risks that bank security teams are likely to raise
• Assess per-tenant data isolation across the database, document search, and AI model calls
• Advise on authentication, authorisation, and IAM for a B2B product with bank-administered users
• Lead SOC 2 readiness, prioritise control gaps, assist in auditor selection, and track progress to completion
• Join bank and partner security calls, including due-diligence questionnaires and penetration test findings reviews
• Review security-relevant code changes before release and support incident response processes as needed

• Background as a CISO, security architect, or security lead at a bank, fintech, or vendor selling to financial institutions
• Hands-on experience designing or reviewing multi-tenant SaaS on Google Cloud with strong customer data isolation
• One or more Google Cloud certifications, such as Professional Cloud Security Engineer or Professional Cloud Architect
• Ability to communicate risk clearly to executive stakeholders and remediation steps to engineering teams in the same setting
• Availability of a few reliable hours per week, with capacity to increase around audits or major bank engagements
• Experience guiding a company through SOC 2 Type I and Type II and familiarity with bank vendor-risk examination requirements

VERU 365 is an early-stage fintech startup building a 24/7 AI-powered financial co-pilot that banks and wealth management firms can offer to their clients under their own brand. The product is multi-tenant, cloud-native, and built on Google Cloud infrastructure.