LogoFresh Jobs Ahead
Tabby
Tabby
201 – 500 Angajați
Comerț electronicFintech
Tabby este o companie de tehnologie financiară și comerț electronic care dezvoltă soluții de plată pentru cumpărături mai flexibile. Serviciul său le permite clienților să împartă achizițiile eligibile în patru plăți lunare fără dobândă și include o aplicație pentru descoperirea produselor, brandurilor și ofertelor din categorii precum modă, frumusețe și electronice. Tabby oferă, de asemenea, instrumente comerciale concepute pentru a ajuta companiile să reducă barierele create de prețuri și să își mărească vânzările, în timp ce Tabby Care sprijină retururile și suspendarea plăților atunci când apar probleme cu o achiziție. Serviciul se integrează cu Visa pentru a susține acceptarea pe scară largă de către comercianți.
LinkedIn
Locurile de muncă ale companiei

Senior Information Security Manager — Onsite in Serbia

Lead Tabby’s information security function across cloud, application, and defensive security for its fintech payments platform. Oversee security programmes, incident response, and the development of a security engineering and analyst team.

RSSerbiaLa sediuNormă întreagăSeniorLimbă Obligatorie: englezăInginer de securitate
AWSCloudGoogle Cloud PlatformSDLCSecuritate cibernetică

Descriere

  • Own hands-on security architecture and technical reviews spanning cloud, infrastructure, and product initiatives
  • Design and deploy security controls across GCP and AWS, including IAM, CSPM, and cloud-native protections
  • Advance Secure SDLC and DevSecOps practices using SAST, DAST, SCA, and container security
  • Lead vulnerability management and contribute to penetration tests, VAPT, and red or purple team exercises
  • Develop threat-detection capabilities, SIEM use cases, and security-monitoring improvements
  • Direct and support investigations into complex security incidents and coordinate response activities
  • Lead security initiatives covering endpoints, infrastructure, networks, and firewalls
  • Automate security workflows and build internal security tools where appropriate
  • Define technical standards, security practices, and operational procedures
  • Manage, mentor, and grow a team of security engineers and analysts
  • Partner with Engineering, Infrastructure, Product, IT, Legal, and Compliance to integrate security throughout Tabby

Cerințe

  • Substantial experience leading information security or cybersecurity functions in a senior technical or management capacity
  • At least five years of professional experience in information security or cybersecurity
  • At least two years in technical leadership or as a senior individual contributor
  • People management or team leadership experience is strongly preferred
  • Broad expertise in cloud security, security architecture, VAPT, application security, DevSecOps, and defensive security
  • Experience directing security programmes and cross-functional initiatives
  • Strong knowledge of GCP and AWS, IAM, CSPM, SIEM, EDR/XDR, and vulnerability management
  • Solid understanding of penetration testing, red and purple teaming, threat hunting, and incident response
  • Experience applying SAST, DAST, SCA, and container security in CI/CD environments
  • Strong grasp of security architecture, threat modelling, and enterprise security controls
  • Experience in a regulated fintech or banking environment
  • Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001, and SOC 2
  • Demonstrated ability in people leadership, stakeholder management, and strategic decision-making
  • CISSP or CISM and OSCP or equivalent certifications are preferred or may be required based on final hiring criteria

Locuri de muncă similare

Centorrino Technologies

Remote Risk Management Specialist — Australia

Centorrino Technologies
201 – 500 Angajați
Asistență medicalăConsultanțăLogistică
AUAustraliaRemoteContractNivel mediuSeniorLimbă Obligatorie: englezăAsigurări
ServiceNow

Implement a risk management system for regulated Australian organisations, translating governance needs into configuration, testing, reporting and adoption. Work across the implementation lifecycle with stakeholders on risk data, controls and executive reporting.

Deschide