Information Security Lead (Defensive)

Role overview

Key responsibilities

• Lead security architecture and design reviews across IT, cloud, and product initiatives.
• Drive GCP and AWS cloud security, including IAM, cloud security posture, and infrastructure security.
• Lead Secure SDLC and DevSecOps, application security, and security tooling across CI/CD.
• Own vulnerability management, remediation, penetration testing, and red team engagements.
• Oversee endpoint, infrastructure, and network security, including EDR, DLP, and firewall security.
• Lead detection engineering, threat intelligence, incident response, and complex security investigations.
• Manage, mentor, and develop security engineers and analysts, including performance and career development.
• Partner with Engineering, IT, Compliance, and other teams to improve security posture and standards.

Experience and expertise

• At least 5 years of cybersecurity or information security experience, including technical leadership or senior-level responsibilities.
• Experience leading security programmes across security architecture, cloud security, vulnerability management, and application security.
• Strong understanding of defensive and offensive security, including penetration testing, red/purple teaming, threat hunting, and incident response.
• Hands-on experience with SIEM, EDR/XDR, vulnerability management, CSPM, DLP, and security monitoring platforms.
• Strong knowledge of GCP and/or AWS, IAM, cloud security, and infrastructure security.
• Experience with DevSecOps, Secure SDLC, SAST, DAST, SCA, and container security.
• Strong scripting and automation skills and ability to develop or oversee security tooling and integrations.
• Knowledge of SAMA CSF, NCA ECC, PCI-DSS, and ISO 27001.
• Experience in a regulated FinTech or banking environment.
• Strong technical leadership, stakeholder management, and team development skills.
• CISSP/CISM and OSCP or equivalent certifications are required.

About Tabby