{"id":2856520,"url":"https://alion.io/job/tabby-lead-information-security-5","title":"Lead, Information Security","company":{"id":255,"name":"Tabby","domain":"tabby.ai","url":"https://alion.io/company/tabby","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Pinpoint","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kazakhstan"],"countries":["KZ"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":21000,"max_usd":56000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":679},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-18T14:59:06Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-25T16:58:00Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money.\nThe company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.\nTabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.\nTabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion.\n\nWe are looking for aLead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response.\nKey Responsibilities\nLead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives.\n Design and implement security controls across GCP and AWS, including IAM, CSPM and cloud-native security. \n Drive and contribute to Secure SDLC / DevSecOps, including SAST, DAST, SCA and container security. \n Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. \n Design and improve threat detection, SIEM use cases and security monitoring. \n Lead and participate in complex security incident investigations and response. \n Drive endpoint, infrastructure, network and firewall security initiatives. \n Automate security processes and develop security tooling where needed. \n Establish technical standards, security best practices and operating procedures. \n Support and mentor a team of security engineers and analysts. \n Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby.\nSkills, Knowledge and Expertise\nStrong experience leading Information Security / Cyber Security functions in a senior technical or management role.\n5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. \n Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security. \n Experience leading security programmes and managing cross-functional initiatives. \n Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management. \n Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response. \n Experience with SAST, DAST, SCA and container security within CI/CD environments. \n Strong understanding of security architecture, threat modelling and enterprise security controls. \n Experience working within a regulated FinTech or banking environment. \n Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2. \n Proven stakeholder management and strategic decision-making skills. \n CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.","description_format":"text","description_chars":3469,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Kazakhstan","iso":"KZ","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Buy Now, Pay Later"],"lifecycle":[{"event":"open","at":"2026-10-19T14:59:06Z"}],"visa":[],"liveness":{"score":94,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":0.945,"age_days":6,"expected_fill_days":15,"reasons":["conf:0","wave","velocity","win:mid"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/tabby-lead-information-security-5","json_url":"https://alion.io/job/tabby-lead-information-security-5.json","meta":{"generated_at":"2026-10-25T17:54:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25626,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":255},"rest":"https://alion.io/mcp/rest/get_company?id=255"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftabby-lead-information-security-5"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftabby-lead-information-security-5"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftabby-lead-information-security-5"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tabby-lead-information-security-5\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftabby-lead-information-security-5"}]}