Senior Manager Information Security

About the role

Tabby is seeking a Senior Manager of Information Security to lead and shape its security function across strategic and technical domains. You will head a team of security engineers and analysts, driving security programmes that protect the company’s cloud, product and infrastructure assets.

Key responsibilities

• Lead and perform hands‑on security architecture reviews for cloud, infrastructure and product initiatives.
• Design and implement security controls in GCP and AWS, including IAM, CSPM and cloud‑native protections.
• Drive Secure SDLC/DevSecOps practices such as SAST, DAST, SCA and container security.
• Manage vulnerability management, penetration testing, VAPT and red/purple‑team engagements.
• Develop and refine SIEM use cases, threat‑detection rules and security monitoring.
• Investigate and respond to complex security incidents.
• Implement endpoint, network, firewall and infrastructure security measures.
• Automate security processes and build custom security tooling.
• Establish technical standards, best practices and operating procedures.
• Mentor, develop and manage a team of security engineers and analysts.
• Collaborate with Engineering, Infrastructure, Product, IT, Legal and Compliance to embed security throughout the organization.

Required profile

• 5+ years of experience in information security or cybersecurity, with at least 2 years in a senior technical or management role.
• Proven track record leading security programmes and cross‑functional initiatives.
• Prior people‑management or team‑leadership experience is strongly preferred.
• Strong communication and collaboration skills across technical and non‑technical stakeholders.

Required skills

• Cloud security (GCP, AWS)
• IAM, CSPM, cloud‑native security controls
• Security architecture
• Secure SDLC / DevSecOps (SAST, DAST, SCA, container security)
• Vulnerability assessment and penetration testing (VAPT)
• Red/blue‑team engagements
• SIEM configuration and threat‑detection rule creation
• Incident investigation and response
• Endpoint, network and firewall security
• Security automation and tooling development