Leads Tabby’s information security function across cloud security, security architecture, application security, vulnerability management, threat detection, incident response, and security operations. Designs controls across GCP and AWS, advances DevSecOps and secure development practices, leads security testing and incident investigations, establishes standards, automates security processes, and mentors security engineers and analysts while partnering with cross-functional teams.
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money.
The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.
Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.
Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion.
The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.
Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.
Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion.
We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response.
Key Responsibilities
- Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives.
- Design and implement security controls across GCP and AWS, including IAM, CSPM and cloud-native security.
- Drive and contribute to Secure SDLC / DevSecOps, including SAST, DAST, SCA and container security.
- Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements.
- Design and improve threat detection, SIEM use cases and security monitoring.
- Lead and participate in complex security incident investigations and response.
- Drive endpoint, infrastructure, network and firewall security initiatives.
- Automate security processes and develop security tooling where needed.
- Establish technical standards, security best practices and operating procedures.
- Support and mentor a team of security engineers and analysts.
- Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby.
Skills, Knowledge and Expertise
- Strong experience leading Information Security / Cyber Security functions in a senior technical or management role.
- 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role.
- Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security.
- Experience leading security programmes and managing cross-functional initiatives.
- Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management.
- Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response.
- Experience with SAST, DAST, SCA and container security within CI/CD environments.
- Strong understanding of security architecture, threat modelling and enterprise security controls.
- Experience working within a regulated FinTech or banking environment.
- Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2.
- Proven stakeholder management and strategic decision-making skills.
- CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.
About
Tabby creates financial freedom in the way people shop, earn and save, by reshaping their relationship with money.The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 32,000 global brands and small businesses, including Amazon, Noon, IKEA and Shein use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.Tabby has generated over $7 billion in transaction volume for its partner brands and has the highest rated, most reviewed, largest and fastest growing app of any fintech in the GCC region.Tabby launched operations in 2020 and has raised +$1 billion in equity and debt funding from global and regional investors.
Similar Jobs
Fintech • Financial Services
Manage day-to-day IT operations for the Tbilisi office, including procurement, account setup and offboarding, hardware maintenance, asset and license inventory, and first-line employee support. Escalate vendor issues and coordinate with Security to ensure processes meet banking standards.
Top Skills:
Access ManagementIt Asset ManagementIt HardwareSoftware LicensingUser Account Management
Fintech • Financial Services
Builds and maintains analytical dashboards using Power BI, Excel, and SQL; analyzes complex business data to identify trends; gathers and documents stakeholder requirements; and delivers data-driven insights and recommendations supporting SME business decisions.
Top Skills:
ExcelMicrosoft PowerpointPower BIPythonRSQLVBA
Professional Services
Provide high-touch technical support for enterprise B2B software clients. Lead onboarding, data scanning, environment discovery, and connectivity troubleshooting across cloud and on-premises systems. Investigate logs, permissions, access controls, configuration issues, and software bugs; guide client IT teams; document and escalate unresolved product issues; and identify recurring problems for product improvement. Support is delivered through email, tickets, and occasional live sessions.
Top Skills:
Active DirectoryAducAWSAzureBoxDnsGoogle DriveGoogle WorkspaceIaasK3SKubectlKubernetesLdapLinuxMicrosoft 365PowershellSaaSSmb/CifsSQLSshSsl/TlsUbuntuWindows File Server
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
