Lead, Information Security

About the role

Tabby is seeking a Lead, Information Security to shape and own its security function across strategic and technical domains. The role will drive security programmes in cloud, architecture, application security, vulnerability management, threat detection and incident response.

Key responsibilities

• Design and implement security controls for GCP and AWS, including IAM, CSPM and cloud‑native protections.
• Lead Secure SDLC/DevSecOps initiatives such as SAST, DAST, SCA and container security within CI/CD pipelines.
• Manage vulnerability management, penetration testing, VAPT and red/purple‑team engagements.
• Develop SIEM use cases, threat detection, and lead complex incident investigations and response.
• Automate security processes, create tooling, and establish technical standards and operating procedures.
• Mentor a team of security engineers and analysts while collaborating with Engineering, Infrastructure, Product, IT, Legal and Compliance.

Required profile

• 5+ years in Information Security or Cybersecurity, with at least 2 years in a senior technical leadership or individual contributor role.
• Proven experience leading security programmes in regulated FinTech or banking environments.
• Strong stakeholder management and strategic decision‑making abilities.

Required skills

• Deep expertise in Cloud Security (GCP, AWS), IAM, CSPM, and cloud‑native security.
• Hands‑on experience with SAST, DAST, SCA, container security, CI/CD pipelines.
• Proficiency in SIEM, EDR/XDR, vulnerability management, penetration testing, red/purple‑team operations, threat hunting and incident response.
• Knowledge of security architecture, threat modelling, ISO 27001, PCI‑DSS, SOC 2, CBUAE, UAE PDPL.
• Relevant certifications such as CISSP, CISM, OSCP are preferred.