The Role
Lead defensive cybersecurity across cloud, IT, and product environments. Manage security architecture reviews, GCP and AWS security, IAM, DevSecOps, vulnerability management, penetration testing, endpoint and firewall security, detection engineering, threat intelligence, and incident response. Lead and mentor cybersecurity engineers and analysts while partnering with Engineering, IT, and Compliance to improve organizational security posture.
Summary Generated by Built In
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money.
The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.
Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.
Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion.
We are looking for a Cyber Security Lead to join our Information Security team in Riyadh. You will provide technical leadership across defensive security, while managing a team of security engineers and analysts and driving security initiatives across the organization.
The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.
Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.
Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion.
We are looking for a Cyber Security Lead to join our Information Security team in Riyadh. You will provide technical leadership across defensive security, while managing a team of security engineers and analysts and driving security initiatives across the organization.
Key Responsibilities
- Lead security architecture and design reviews across IT, cloud, and product initiatives.
- Drive cloud security across GCP and AWS, including IAM, security posture, and infrastructure security.
- Own the Secure SDLC / DevSecOps program, including SAST, DAST, SCA and container security.
- Lead vulnerability management, penetration testing and red team engagements.
- Oversee endpoint, infrastructure and firewall security.
- Drive detection engineering, threat intelligence and complex incident response.
- Develop and mentor a team of cybersecurity engineers and analysts.
- Partner with Engineering, IT, Compliance and other teams to improve Tabby’s overall security posture.
Skills, Knowledge and Expertise
- 5+ years of cybersecurity experience, including technical leadership or senior-level responsibilities.
- Strong experience across security architecture, cloud security, AppSec/DevSecOps and vulnerability management.
- Hands-on understanding of offensive and defensive security, including penetration testing, red/purple teaming and incident response.
- Experience with SIEM, EDR/XDR, CSPM, DLP and vulnerability management platforms.
- Strong knowledge of GCP/AWS, IAM, Terraform, Kubernetes and CI/CD security.
- Experience with SAST, DAST, SCA and secure SDLC practices.
- Knowledge of SAMA CSF, NCA ECC, PCI-DSS and ISO 27001.
- Strong technical leadership, stakeholder management and team development skills.
- CISSP/CISM and OSCP or equivalent certifications are required.
About
Tabby creates financial freedom in the way people shop, earn and save, by reshaping their relationship with money.The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 32,000 global brands and small businesses, including Amazon, Noon, IKEA and Shein use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.Tabby has generated over $7 billion in transaction volume for its partner brands and has the highest rated, most reviewed, largest and fastest growing app of any fintech in the GCC region.Tabby launched operations in 2020 and has raised +$1 billion in equity and debt funding from global and regional investors.
Skills Required
- 5+ years of cybersecurity experience, including technical leadership or senior-level responsibilities
- Strong experience in security architecture, cloud security, AppSec/DevSecOps, and vulnerability management
- Hands-on experience with offensive and defensive security, penetration testing, red/purple teaming, and incident response
- Experience with SIEM, EDR/XDR, CSPM, DLP, and vulnerability management platforms
- Strong knowledge of GCP, AWS, IAM, Terraform, Kubernetes, and CI/CD security
- Experience with SAST, DAST, SCA, and secure SDLC practices
- Knowledge of SAMA CSF, NCA ECC, PCI-DSS, and ISO 27001
- Strong technical leadership, stakeholder management, and team development skills
- CISSP or CISM certification
- OSCP or equivalent certification
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Tabby is a financial technology company on a mission to create financial freedom by reshaping people's relationship with money through buy now, pay later services, allowing consumers to split purchases into interest-free payments.
