Lead Information Security (Defensive)

About Tabby

Tabby is a FinTech company that provides financial freedom through its shopping, earning, and saving solutions. The company's platform allows over 17 million users to manage their spending. Tabby enables shoppers to split payments online and in-store without interest or fees, serving over 40,000 brands including Amazon, Noon, IKEA, and SHEIN. Launched in 2019, Tabby generates over $10 billion in annual transaction volume and is recognized as a leading FinTech in the GCC region, with a valuation of $ billion from over $1 billion in funding.

The Role

Tabby is seeking a Lead Information Security (Defensive) to join its Information Security team in Riyadh, Saudi Arabia. This full-time position requires 5-10 years of experience. The successful candidate will provide technical leadership in defensive security, manage a team of security engineers and analysts, and drive security initiatives across the organization.

Key Responsibilities

• Lead security architecture and design reviews for IT, cloud, and product initiatives.
• Drive cloud security efforts across GCP and AWS, including IAM, security posture, and infrastructure security.
• Own the Secure SDLC / DevSecOps program, encompassing SAST, DAST, SCA, and container security.
• Lead vulnerability management, penetration testing, and red team engagements.
• Oversee endpoint, infrastructure, and firewall security.
• Drive detection engineering, threat intelligence, and complex incident response.
• Develop and mentor a team of cybersecurity engineers and analysts.
• Partner with Engineering, IT, Compliance, and other teams to enhance Tabby’s overall security posture.

Required Experience

• A minimum of 5 to 10 years of experience in information security, with a focus on defensive strategies.
• Demonstrated experience in technical leadership within cybersecurity.

Work Location and Type

This is a full-time position based in Riyadh, Riyadh, Saudi Arabia.