Information Security Lead (Defensive)

About Tabby

Tabby is pioneering financial freedom by transforming how people shop, earn, and save, serving over 25 million users who rely on Tabby's services to manage spending and maximize financial benefits. Its flagship product enables interest-free and fee-free installment payments both online and in-store, partnering with more than 70,000 global brands such as Amazon, Noon, IKEA, and SHEIN to boost their business growth through flexible payment solutions. Tabby processes more than $18 billion annually in transaction volume and holds the distinction of being the highest-rated and fastest-expanding FinTech firm in the GCC, backed by over $1 billion in funding and currently valued at $6.5 billion.

Role Overview

Seeking a Cyber Security Lead in Riyadh to guide the Information Security department, providing strategic and technical direction in defensive security. This leadership role involves overseeing a team of security engineers and analysts and spearheading security programs across the enterprise.

Key Duties and Responsibilities

• Lead security architecture and design assessments for IT systems, cloud infrastructure, and product development.
• Champion cloud security efforts on GCP and AWS platforms, focusing on identity and access management, security posture, and infrastructure protections.
• Oversee the Secure SDLC and DevSecOps initiatives, including application security and integration of security tools within CI/CD pipelines.
• Manage the vulnerability program encompassing remediation, penetration testing, and red team operations.
• Supervise endpoint, network, and infrastructure security technologies, including endpoint detection and response (EDR), data loss prevention (DLP), and firewall management.
• Direct detection engineering, threat intelligence collection, incident response, and complex security investigations.
• Coach and develop the security team through mentoring, performance review, and career advancement.
• Collaborate with Engineering, IT, Compliance, and other departments to enhance security postures and standards across Tabby.

Required Skills and Experience

• Minimum of five years in cybersecurity or information security, including roles with technical leadership or senior responsibilities.
• Proven leadership in security programs covering architecture, cloud security, vulnerability management, and application security.
• Expertise in both defensive and offensive security tactics such as penetration testing, red/purple team exercises, threat hunting, and incident response.
• Hands-on proficiency with SIEM, EDR/XDR, CSPM solutions, vulnerability scanners, and DLP technologies.
• Deep understanding of cloud environments, specifically GCP and/or AWS, with strong knowledge of IAM and infrastructure security.
• Experience implementing DevSecOps, Secure SDLC models, including usage of SAST, DAST, SCA, and container security tools.
• Advanced scripting and automation skills to develop or manage security tooling and platform integrations.
• Familiarity with regulatory standards including SAMA Cybersecurity Framework, NCA ECC, PCI-DSS, and ISO 27001.
• Background working within regulated FinTech or banking sectors preferred.
• Demonstrated expertise in technical leadership, stakeholder engagement, and talent development.
• Mandatory certifications: CISSP or CISM plus OSCP or equivalents.