Senior Manager Information Security

About the role

Tabby, a fast‑growing fintech in the GCC, is seeking a Senior Manager Information Security to lead and shape its security function across strategic and technical domains. The role will head a team of security engineers and own key programmes covering cloud security, architecture, application security, vulnerability management, threat detection and incident response.

Key responsibilities

• Lead and contribute hands‑on to security architecture and technical security reviews across cloud, infrastructure and product initiatives.
• Design and implement security controls in GCP and AWS, including IAM, CSPM and cloud‑native protections.
• Drive Secure SDLC / DevSecOps practices such as SAST, DAST, SCA and container security.
• Oversee vulnerability management, penetration testing, VAPT and red/purple‑team engagements.
• Develop and refine SIEM use cases, threat‑detection rules and security monitoring.
• Lead complex security incident investigations and response activities.
• Implement endpoint, network, firewall and infrastructure security initiatives.
• Automate security processes and build custom tooling where needed.
• Establish technical standards, best practices and operating procedures.
• Manage, mentor and develop a team of security engineers and analysts.
• Collaborate with Engineering, Infrastructure, Product, IT, Legal and Compliance to embed security across the organization.

Required profile

• 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role.
• Proven experience leading security functions or programmes in a fast‑growing technology environment.
• Prior people‑management or team‑leadership experience is strongly preferred.
• Strong knowledge of GCP and AWS cloud platforms.

Required skills

• GCP
• AWS
• IAM
• CSPM
• Security architecture
• Secure SDLC / DevSecOps
• SAST
• DAST
• SCA
• Container security
• Vulnerability management
• Penetration testing / VAPT
• Red‑team / Purple‑team engagements
• SIEM
• Threat detection
• Endpoint security
• Network and firewall security