Manager of Information Security

Remotedxb; Dubai; On-site; AED 360,000 - 600,000; Full time

Benefits offered by this job

Competitive cash and equity

Health benefits

Student loan repayment

401k matching

Commuter benefits

Flexible PTO

Job summary

Clasp is seeking a senior Information Security Leader in Dubai to own the SOC 2 program end-to-end and drive the evolution of information security policies across the organization.

You will lead IT/TechOps, manage third-party security reviews, enhance cloud posture (GCP), IAM, and platform hardening, and collaborate with engineering and AI Labs on secure SDLC and threat modeling.

Qualifications

• CISSP certification is required.
• 5+ years on a security team or equivalent leadership.
• Startup experience in a fast-paced environment preferred.
• Experience with SOC 2 or ISO 27001.
• Technical foundation in scripting, automation, or data analysis.
• Ability to prototype and use AI/modern tooling to solve problems.

Responsibilities

• Run the SOC 2 program end to end and own security policy evolution.
• Lead IT/TechOps covering laptop provisioning, MDM, onboarding/offboarding, and SaaS management.
• Own third-party security reviews and respond to security questionnaires from customers or auditors.
• Configure SIEM, manage vulnerability management, and IDS for proactive visibility.
• Partner with engineering to improve cloud posture (GCP), IAM, and platform hardening.
• Advance secure SDLC including dependency scanning, CI/CD hardening, and threat modeling.
• Collaborate with AI Labs to build or buy agentic security solutions for detection and review processes.

Skills

CISSP certification

Security leadership

Startup experience

SOC 2 / ISO 27001

Scripting / automation / data analysis

AI tooling and prototyping

Communication

Tools

SIEM

IDS

MDM

SaaS management

Job description

About the Company

Clasp is a Forbes Fintech 50, SHRM-backed company tackling two hard problems at once: helping employers attract and retain talent in critical fields, and easing the student debt crisis. We're at a Series B inflection point, growing fast, with enterprise customers and partner banks who hold us to a high security bar.

Responsibilities

• Run the SOC 2 program end to end and own the evolution of Information Security policies
• Lead the IT/TechOps team covering laptop procurement, MDM, onboarding/offboarding, and SaaS management
• Own third-party security reviews and respond to customer/partner-bank security questionnaires
• Configure SIEM, manage vulnerability management, and IDS to provide proactive visibility
• Partner with engineering to advance cloud posture (GCP), IAM, and platform hardening
• Advance secure SDLC, including dependency scanning, CI/CD hardening, and threat modeling
• Work with AI Labs to build or buy agentic security solutions for detection, triage, and access reviews

Requirements

• CISSP certification
• 5+ years of experience on a security team
• Startup experience in a fast-paced environment
• Experience with SOC 2 or ISO 27001 compliance
• Technical foundation in scripting, web development, automation, or data analysis
• Ability to prototype and use AI/modern tooling to solve problems efficiently
• Strong communication skills for interacting with customers, banks, and auditors

Preferred Qualifications

• Experience in Fintech, lending, or other regulated industries
• Hands-on depth in GCP security (or AWS)
• Experience standing up a SOC 2 program from scratch
• Experience fielding diligence from partner banks or enterprise customers

Benefits

• Competitive cash and equity compensation
• Health benefits (health, dental, & vision)
• Student loan repayment benefits
• 401k matching
• Commuter benefits
• Flexible PTO policy