Information Security Lead (Defensive)

About Tabby

Tabby is a FinTech company focused on reshaping financial interactions for shopping, earning, and saving. The platform serves over 25 million users, enabling them to manage spending and optimize their finances. Tabby's core offering allows shoppers to split payments online and in-store without interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN, utilize Tabby to facilitate flexible payments, driving growth and customer loyalty. The company generates over $18 billion in annual transaction volume for its partners and is recognized as a leading FinTech in the GCC region, having launched in 2019 and raised over $1 billion in funding, reaching a valuation of $ billion.

The Opportunity

Tabby is seeking an Information Security Lead (Defensive) to join its Information Security team in Riyadh, Saudi Arabia. This full-time role requires 5-10 years of experience and involves providing technical leadership in defensive security, managing a team of security engineers and analysts, and driving security initiatives across the organization.

Key Responsibilities

• Lead security architecture and design reviews for IT, cloud, and product initiatives.
• Drive cloud security across GCP and AWS environments, including IAM, cloud security posture management, and infrastructure security.
• Lead the Secure SDLC / DevSecOps program, encompassing application security and security tooling within CI/CD pipelines.
• Manage vulnerability management processes, including remediation, penetration testing, and red team engagements.
• Oversee endpoint, infrastructure, and network security, covering EDR, DLP, and firewall security.
• Lead detection engineering, threat intelligence, and incident response, including complex security investigations.
• Manage and develop a team of security engineers and analysts, providing mentoring, performance management, and career development.
• Collaborate with Engineering, IT, Compliance, and other teams to enhance Tabby’s overall security posture and standards.

Required Experience

• 5-10 years of experience in information security roles, with a focus on defensive security.
• Demonstrated experience in leading security initiatives and managing security teams.

Work Environment

This is a full-time position based in Riyadh, Riyadh, Saudi Arabia, within Tabby's Information Security team.