Senior Manager Information Security

About the role

We are looking for a Senior Manager Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead a team of security professionals and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response.

Key responsibilities

• Lead and contribute hands‑on to security architecture and technical security reviews across cloud, infrastructure and product initiatives.
• Design and implement security controls across GCP and AWS, including IAM, CSPM and cloud‑native security.
• Drive Secure SDLC / DevSecOps, including SAST, DAST, SCA and container security.
• Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements.
• Design and improve threat detection, SIEM use cases and security monitoring.
• Lead and participate in complex security incident investigations and response.
• Drive endpoint, infrastructure, network and firewall security initiatives.
• Automate security processes and develop security tooling where needed.
• Establish technical standards, security best practices and operating procedures.
• Manage, mentor and develop a team of security engineers and analysts.

Required profile

• 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role.
• Prior people‑management or team‑leadership experience, preferably in a regulated FinTech or banking environment.
• Strong knowledge of security governance, stakeholder management and strategic decision‑making.
• Familiarity with CBUAE, UAE PDPL, PCI‑DSS, ISO 27001 and SOC 2 compliance frameworks.
• Relevant certifications such as CISSP, CISM and OSCP are preferred.

Required skills

• GCP
• AWS
• IAM
• CSPM
• SIEM
• EDR/XDR
• Vulnerability Management
• Penetration Testing
• Red Teaming
• Purple Teaming
• Threat Hunting
• Incident Response
• SAST
• DAST
• SCA
• Container Security
• CI/CD
• Security Architecture
• Cloud Security
• AppSec
• DevSecOps
• Threat Modelling
• PCI‑DSS
• ISO 27001
• SOC 2
• CISSP
• CISM
• OSCP