Information Security Lead – Defensive

About the role

Tabby is seeking a Cyber Security Lead to head defensive security initiatives for its rapidly growing FinTech platform. Based in Riyadh, you will provide technical leadership, manage a team of engineers and analysts, and drive security across cloud, product and infrastructure.

Key responsibilities

• Lead security architecture and design reviews for IT, cloud (GCP, AWS) and product initiatives.
• Drive cloud security posture, IAM governance, and infrastructure hardening.
• Own the Secure SDLC/DevSecOps programme, integrating application security tooling into CI/CD pipelines.
• Manage vulnerability management, including remediation, penetration testing and red‑team engagements.
• Oversee endpoint, network and data loss prevention controls, including EDR/XDR and firewall management.
• Lead detection engineering, threat intelligence and incident response, conducting complex investigations.
• Mentor and develop a team of security engineers and analysts.
• Collaborate with Engineering, IT, Compliance and other stakeholders to raise the overall security posture.

Required profile

• 5+ years of experience in cybersecurity with senior‑level or technical leadership responsibilities.
• Proven track record delivering security programmes across architecture, cloud, vulnerability and application security.
• Experience in regulated FinTech or banking environments and familiarity with standards such as PCI‑DSS, ISO 27001, SAMA CSF.
• Relevant certifications (CISSP, CISM, OSCP) required.

Required skills

• Google Cloud Platform (GCP) and Amazon Web Services (AWS) security, IAM, CSPM.
• Vulnerability management, penetration testing, red‑team/blue‑team operations.
• SIEM, EDR/XDR, DLP, firewall and network security tools.
• Secure SDLC, DevSecOps, SAST, DAST, SCA, container security.
• Scripting and automation (e.g., Python, Bash).