Senior Information Security GRC Specialist (UAE)

Tabby | تابي; Abu Dhabi; On-site; AED 350,000 - 600,000; Full time

Benefits offered by this job

Health Insurance

Stock options

Flexible benefits

Autonomy

Job summary

Tabby, a UAE-based fintech, is seeking a Senior Information Security Specialist (GRC) to lead governance, risk, and compliance activities within the InfoSec GRC department.

You will mentor staff, drive regulatory reporting, and collaborate with legal, audits, and product teams to align with CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS in the UAE.

This role requires 3+ years in information security governance and strong vendor risk experience, with ISO 27001 Lead Implementer certification preferred.

Qualifications

• 3+ years in information security governance, risk management, or compliance.
• Experience leading risk assessment cycles and audits.
• Knowledge of CSF, NCA ECC, PDPL, ISO 27001, PCI-DSS.
• Experience in Fintech or banking environment preferred.

Responsibilities

• Lead governance policy development and updates aligned with CSF, NCA ECC, ISO 27001, PCI-DSS.
• Manage enterprise information security risk assessments and risk register.
• Coordinate regulatory self-assessments and attestation processes.
• Lead third-party risk assessments and vendor risk management.
• Develop security awareness and onboarding for staff.
• Deliver executive risk reporting and KRIs to leadership.
• Integrate security requirements into contracts and projects.

Skills

GRC governance

Regulatory compliance

Policy development

Third-party risk

Stakeholder mgmt

Regulatory reporting

Mentoring

Education

Bachelor's degree in IT/Cybersecurity

Master's in Information Security (adv.)

Job description

Tabby, a UAE-based fintech, is seeking a Senior Information Security Specialist (GRC) to lead governance, risk, and compliance activities within the InfoSec GRC department.

You will mentor staff, drive regulatory reporting, and collaborate with legal, audits, and product teams to align with CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS in the UAE.

This role requires 3+ years in information security governance and strong vendor risk experience, with ISO 27001 Lead Implementer certification preferred.