Information Security Lead (Defensive)

Information Security Lead (Defensive) – Drive Tabby’s Vision for Secure Financial Innovation

At Tabby, we empower millions of users to transform their relationship with money—enabling smarter spending, earning, and saving through cutting-edge financial technology. As a leader in the GCC FinTech landscape, we process over $18 billion in annual transaction volume, partnering with 70,000+ global brands, including industry giants like Amazon, Noon, IKEA, and SHEIN. Our mission is to redefine financial freedom, and we’re backed by a $6.5 billion valuation and over $1 billion in equity and debt funding from global investors.

We are seeking a visionary Information Security Lead (Defensive) to spearhead our cybersecurity initiatives in Riyadh. In this pivotal role, you will lead our Information Security team, fostering a culture of proactive defense while driving innovation in security architecture, cloud security, and DevSecOps. This is an opportunity to shape Tabby’s security posture, mentor high-performing teams, and ensure the integrity of our financial ecosystem.

Key Responsibilities

As the Information Security Lead, your strategic and technical expertise will be instrumental in:

• Guiding Security Architecture and Design: Lead comprehensive security reviews for IT, cloud, and product initiatives, ensuring alignment with industry best practices and regulatory standards.
• Advancing Cloud Security: Oversee security for GCP and AWS environments, including Identity and Access Management (IAM), security posture assessments, and infrastructure hardening.
• Driving DevSecOps and Secure SDLC: Champion the integration of security into the software development lifecycle, leveraging SAST, DAST, Supply Chain Attack (SCA) tools, and container security to mitigate risks early.
• Leading Vulnerability Management and Penetration Testing: Direct red team engagements, penetration testing, and vulnerability management programs to identify and remediate threats proactively.
• Ensuring Endpoint and Network Security: Oversee endpoint protection, infrastructure security, and firewall configurations to safeguard Tabby’s digital assets.
• Enhancing Threat Detection and Incident Response: Develop advanced detection strategies, leverage threat intelligence, and lead complex incident response efforts to minimize risk and ensure business continuity.
• Building and Mentoring High-Performance Teams: Foster a collaborative environment by mentoring security engineers and analysts, nurturing talent, and driving continuous improvement.
• Collaborating Across Functions: Partner with Engineering, IT, Compliance, and other teams to elevate Tabby’s overall security posture, ensuring compliance with global standards like SAMA CSF, NCA ECC, PCI-DSS, and ISO 27001.

Skills, Knowledge, and Expertise

We are looking for a seasoned cybersecurity professional with:

• 5+ Years of Cybersecurity Leadership: Proven experience in technical leadership or senior-level roles, with a track record of driving impactful security initiatives.
• Expertise in Security Architecture and Cloud Security: Deep knowledge of cloud security frameworks, IAM, Terraform, Kubernetes, and CI/CD pipelines, with hands-on experience in GCP and AWS.
• AppSec and DevSecOps Proficiency: Strong understanding of SAST, DAST, SCA, and secure SDLC practices to embed security into every phase of development.
• Offensive and Defensive Security Acumen: Practical experience in penetration testing, red/purple teaming, and incident response to fortify Tabby’s defenses.
• Platform Expertise: Familiarity with SIEM, EDR/XDR, CSPM, and DLP solutions to monitor, detect, and respond to threats effectively.
• Regulatory Compliance Knowledge: In-depth understanding of SAMA CSF, NCA ECC, PCI-DSS, and ISO 27001 to ensure alignment with global and regional standards.
• Leadership and Stakeholder Management: Exceptional ability to lead cross-functional teams, manage stakeholders, and drive organizational change toward a stronger security culture.
• Certifications: CISSP, CISM, or OSCP certifications (or equivalent) are required to validate your expertise and commitment to cybersecurity excellence.

Join Tabby and be at the forefront of shaping the future of secure financial technology. Your leadership will not only protect our users and partners but also drive innovation in a rapidly evolving digital landscape.