Senior Information Security GRC Specialist

About the role

The Senior Information Security Specialist (GRC) leads complex governance, risk and compliance initiatives for Tabby, shaping the security framework to meet UAE fintech regulations. You will act as a subject‑matter expert, mentor junior staff and ensure continuous improvement of risk treatment and compliance reporting.

Key responsibilities

• Develop, review and improve security policies, standards and procedures aligned with CSF, NCA ECC, ISO 27001 and PCI‑DSS.
• Lead enterprise risk assessments, maintain the risk register and produce executive‑level risk reports.
• Manage regulatory self‑assessments, compliance attestations and audit cycles, coordinating evidence collection and remediation.
• Design and deliver security awareness programmes and maintain GRC metrics dashboards.
• Oversee third‑party security risk assessments and integrate security requirements into contracts and projects.

Required profile

• Bachelor’s degree in IT, Cybersecurity, Risk Management or related field; Master’s degree is a plus.
• 3+ years of progressive experience in information security governance, risk management or compliance, preferably in a regulated fintech or banking environment.
• Proven ability to lead risk assessment cycles, regulatory programmes and audit coordination independently.

Required skills

• ISO 27001 Lead Implementer certification (required).
• CRISC or CISM certification (required or actively pursued).
• Knowledge of CSF, NCA ECC, PDPL, ISO 27001 and PCI‑DSS frameworks.
• Experience with enterprise risk registers, BIA processes and third‑party risk assessments.

What we offer

• Autonomous work environment with responsibility from day one.
• Employee stock options program.
• Health insurance.
• Flexi Perks – monetary benefit usable for health, education, travel, etc.