Senior GRC & Information Security Lead

Tabby; Abu Dhabi; On-site; AED 350,000 - 700,000; Full time

Benefits offered by this job

Health Insurance

Flexi Perks

Job summary

Tabby, a UAE fintech, is seeking a Senior Information Security Specialist (GRC) to lead governance, risk, and compliance efforts in alignment with UAE fintech regulations. You will mentor junior staff and drive improvements across the GRC framework while collaborating with legal, audit, and business stakeholders.

Responsibilities include developing security policies, managing risk assessments, and overseeing third-party risk, with a focus on CSF, NCA ECC, ISO 27001, and PCI-DSS.

Qualifications

• 3+ years of progressive professional experience in information security governance, risk management, or compliance.
• Experience leading risk assessment cycles, regulatory compliance programmes, or audit coordination.
• In-depth knowledge of at least two regulatory frameworks applicable to Fintech environments (CSF, NCA ECC, PDPL, ISO 27001, PCI-DSS).

Responsibilities

• Lead development and improvement of information security policies and governance frameworks.
• Monitor regulatory developments and update governance framework.
• Prepare governance documentation and present findings to executives.
• Lead enterprise information security risk assessments and maintain risk register.
• Oversee third-party information security risk management.
• Deliver compliance monitoring for CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS.

Skills

Governance leadership

Risk management

Regulatory compliance

Third-party risk

Security awareness

Stakeholder collaboration

Education

Bachelor's degree in Information Technology / Computer Science / Cybersecurity

Master's degree in Information Security / Risk Management (advantage)

Job description

Tabby, a UAE fintech, is seeking a Senior Information Security Specialist (GRC) to lead governance, risk, and compliance efforts in alignment with UAE fintech regulations. You will mentor junior staff and drive improvements across the GRC framework while collaborating with legal, audit, and business stakeholders.

Responsibilities include developing security policies, managing risk assessments, and overseeing third-party risk, with a focus on CSF, NCA ECC, ISO 27001, and PCI-DSS.