Dealing with a hacker in an organization

As the CEO of an organization, you just learned that the information technology (IT) security department hired a convicted hacker who used to write malicious code as a security consultant. Would you overturn this decision? Why, or why not?​