Senior GRC & InfoSec Leader – UAE Fintech

Tabby | تابي; Dubai; On-site; AED 300,000 - 520,000; Full time

Benefits offered by this job

Health Insurance

Stock options

Flexi Perks

Job summary

Tabby is seeking a Senior Information Security Specialist (GRC) to lead governance, risk and compliance activities within the UAE fintech landscape.

You will own regulatory mappings (CSF, NCA ECC, PDPL, ISO 27001, PCI-DSS), manage risk registers and third‑party risk, and mentor junior staff. Collaborating with legal, audit and product teams, you’ll drive mature GRC outcomes aligned with regulatory expectations.

Qualifications

• 3+ years in information security governance, risk management or compliance.
• Experience leading risk assessment cycles and audit coordination.
• Knowledge of CSF, NCA ECC, PDPL, ISO 27001, PCI-DSS.
• ISO 27001 Lead Implementer required; CRISC or CISM preferred; CDPSE advantageous.

Responsibilities

• Lead governance policy development and assurance aligned with CSF, NCA ECC, ISO 27001, and PCI-DSS.
• Interpret regulatory requirements and translate into implementable controls.
• Monitor regulatory changes and update the governance framework.
• Prepare governance docs and present to senior stakeholders.
• Oversee risk assessments and third-party risk management.
• Mentor junior team members on governance documentation and risk methodology.

Skills

Information governance

Risk assessment

Regulatory compliance

Vendor risk management

Policy development

Leadership

Education

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Risk Management, or related field

Master's degree in Information Security, Risk Management, or Business Administration

Job description

Tabby is seeking a Senior Information Security Specialist (GRC) to lead governance, risk and compliance activities within the UAE fintech landscape.

You will own regulatory mappings (CSF, NCA ECC, PDPL, ISO 27001, PCI-DSS), manage risk registers and third‑party risk, and mentor junior staff. Collaborating with legal, audit and product teams, you’ll drive mature GRC outcomes aligned with regulatory expectations.