Lead, Information Security

About the role

Tabby is seeking a Lead, Information Security to shape and own its security function across strategic and technical domains. You will work remotely while collaborating with engineering, product, legal and compliance teams to embed security throughout the organisation.

Key responsibilities

• Lead hands‑on security architecture reviews and design controls for GCP and AWS environments, including IAM, CSPM and cloud‑native solutions.
• Drive Secure SDLC/DevSecOps practices such as SAST, DAST, SCA and container security within CI/CD pipelines.
• Own vulnerability management, penetration testing, VAPT and red/purple‑team engagements.
• Design and improve SIEM use cases, threat detection and security monitoring.
• Investigate and respond to complex security incidents, and lead endpoint, network and firewall security initiatives.
• Automate security processes, develop tooling, and establish technical standards and operating procedures.
• Mentor a team of security engineers and analysts and coordinate cross‑functional security programmes.

Required profile

• 5+ years in Information Security or Cybersecurity, with at least 2 years in a senior technical leadership role.
• Proven experience leading security programmes in a regulated FinTech or banking environment.
• Strong stakeholder management and strategic decision‑making abilities.

Required skills

• Cloud security on GCP and AWS (IAM, CSPM, cloud‑native security).
• Security architecture, threat modelling and enterprise security controls.
• Vulnerability management, penetration testing, VAPT, red/purple‑team operations.
• Secure SDLC/DevSecOps tools: SAST, DAST, SCA, container security.
• SIEM, EDR/XDR, endpoint, network and firewall security.
• Automation and security tooling development.
• Regulatory knowledge: CBUAE, UAE PDPL, PCI‑DSS, ISO 27001, SOC 2.
• Certifications: CISSP, CISM, OSCP (preferred).