Senior Manager Information Security

About the role

Tabby is seeking a Senior Manager Information Security to lead and shape its security function across strategic and technical domains. You will head a team of security professionals and own key programmes covering cloud security, architecture, application security, vulnerability management, threat detection and incident response.

Key responsibilities

• Lead hands‑on security architecture reviews for cloud, infrastructure and product initiatives.
• Design and implement security controls in GCP and AWS, including IAM, CSPM and cloud‑native protections.
• Drive Secure SDLC/DevSecOps practices such as SAST, DAST, SCA and container security.
• Manage vulnerability management, penetration testing, VAPT and red/purple‑team engagements.
• Create and refine SIEM use cases, threat detection and security monitoring.
• Lead complex security incident investigations and response.
• Implement endpoint, network, firewall and infrastructure security initiatives.
• Automate security processes and develop custom tooling.
• Establish technical standards, best practices and operating procedures.
• Mentor and develop a team of security engineers and analysts.
• Collaborate with Engineering, Infrastructure, Product, IT, Legal and Compliance to embed security.

Required profile

• 5+ years of experience in Information Security or Cybersecurity.
• At least 2 years in a senior technical leadership or individual contributor role.
• Proven experience leading security programmes and cross‑functional initiatives.
• Prior people‑management or team‑leadership experience preferred.

Required skills

• Deep expertise in Cloud Security (GCP, AWS) and IAM.
• Security Architecture, CSPM, SIEM, EDR/XDR.
• Vulnerability Management, Penetration Testing, VAPT, Red/Purple‑Team.
• AppSec/DevSecOps: SAST, DAST, SCA, Container Security.
• Threat Detection, Incident Response, Security Monitoring.