Senior GRC Information Security Lead – Flexible Benefits

تابي; Dubai; On-site; AED 300,000 - 520,000; Full time

Benefits offered by this job

Health Insurance

Stock options

Flexi Perks

Job summary

Tabby is seeking a Senior Specialist, Information Security (GRC) in the UAE to lead governance, risk, and compliance activities within the InfoSec GRC team. You will drive policy development, regulatory alignment, and risk assessments across fintech environments.

You will mentor teammates, coordinate audits, and report on GRC metrics to senior stakeholders, ensuring robust controls and regulatory readiness in the UAE Fintech landscape.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or related field.
• Master's degree in Information Security, Risk Management, or MBA is an advantage.
• 3+ years of governance, risk management, or compliance experience in information security.
• Knowledge of CSF, NCA ECC, PDPL, ISO 27001, PCI-DSS for Fintech.
• Experience in regulated Fintech or banking is preferred.

Responsibilities

• Lead governance policy, standards, and framework development aligned with CSF, NCA ECC, ISO 27001, and PCI-DSS.
• Perform enterprise information security risk assessments and maintain risk registers.
• Lead third‑party risk management and vendor assessments.
• Coordinate internal/external audits and remediation tracking.
• Design and deliver GRC metrics, reporting, and awareness programs.
• Mentor junior staff and contribute to GRC knowledge base.

Skills

GRC governance

Risk assessment

Regulatory compliance

Audit coordination

Education

Bachelor's degree in IT/CS/Cybersecurity

Master's degree (advantage)

Job description

Tabby is seeking a Senior Specialist, Information Security (GRC) in the UAE to lead governance, risk, and compliance activities within the InfoSec GRC team. You will drive policy development, regulatory alignment, and risk assessments across fintech environments.

You will mentor teammates, coordinate audits, and report on GRC metrics to senior stakeholders, ensuring robust controls and regulatory readiness in the UAE Fintech landscape.