About the Job
Tabby creates financial freedom in the way people shop, earn, and save by reshaping their relationship with money. The company's flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 32,000 global brands and small businesses, including Amazon, Noon, IKEA, and Shein, use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments. Tabby has generated over $7 billion in transaction volume for its partner brands and has the highest-rated, most-reviewed, largest, and fastest-growing app of any fintech in the GCC region. Since launching operations in 2020, Tabby has raised over $1 billion in equity and debt funding from global and regional investors.
We are excited to announce an opportunity for a skilled Information Security Specialist to enhance our security measures. In this role, you will develop and maintain information security policies, procedures, and guidelines. Responsibilities include implementing and maintaining standards and frameworks for continual improvement of Information Security, including SAMA, ISO, PCI-DSS, and UAE IAR.
Key Responsibilities
- Develop and manage the organization's policies, procedures, and guidelines, maintaining them in a controlled and auditable manner.
- Manage and deliver engagements covering vulnerability assessments, penetration testing, IT audits, Information Security audits, and compliance reviews against regulations and industry standards.
- Align standards and security frameworks with overall business and technology strategy.
- Support the Information Security team in achieving high security standards across Tabby's network.
- Monitor Cyber Security requirements from third-party payment processors and communicate the Cyber Security Posture.
- Conduct risk assessments to identify scope for improvement in Information Technology and Security processes.
- Perform gap analysis and maturity assessments.
- Collaborate with cross-functional teams and stakeholders to gather information and define Standard Operating Procedure (SOP) requirements.
- Conduct phishing simulations and awareness exercises to assess and improve employee resilience to social engineering attacks.
- Work with various product and engineering teams to prioritize and implement security features and controls.
Skills, Knowledge & Expertise
- Degree in Information Technology, Computer Science, Software Engineering, or a related field.
- Knowledge of Information Technology security issues and management approaches in a fast-paced FinTech environment.
- Familiarity with ISO27001, NIST, SAMA CSF, PCI-DSS, and similar frameworks.
- Excellent communication, influencing, and stakeholder management skills.
- Project management experience leading data security projects across multiple locations.
- Experience developing and delivering training in a culturally diverse environment.
- 1-2 years of experience in information security, document writing, and governance, risk, and compliance (GRC).
Job Benefits
- Competitive salary based on experience.
- Excellent health benefits.
- Flexible working hours.
- An environment that offers autonomy and responsibility from day one.
- Participation in the company's employee stock options program.
- Commitment to creating an equitable, high-performing workplace that provides support for employee growth and goals.
