Senior Manager Information Security

About the role

Tabby is seeking a Senior Manager of Information Security to lead and shape its security function across strategic and technical domains. You will manage a team of engineers and analysts while driving security programmes across cloud, architecture, application, and incident response.

Key responsibilities

• Lead and contribute hands‑on to security architecture and technical security reviews across cloud, infrastructure and product initiatives.
• Design and implement security controls in GCP and AWS, including IAM, CSPM and cloud‑native security.
• Drive Secure SDLC / DevSecOps, covering SAST, DAST, SCA and container security.
• Lead vulnerability management and participate in penetration testing, VAPT and red/purple‑team engagements.
• Design and improve threat detection, SIEM use cases and security monitoring.
• Lead and participate in complex security incident investigations and response.
• Drive endpoint, infrastructure, network and firewall security initiatives.
• Automate security processes and develop security tooling where needed.
• Establish technical standards, security best practices and operating procedures.
• Manage, mentor and develop a team of security engineers and analysts.
• Collaborate with Engineering, Infrastructure, Product, IT, Legal and Compliance to embed security across the organization.

Required profile

• 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a senior technical leadership or individual contributor role.
• Strong experience leading InfoSec/Cybersecurity functions in a senior technical or management capacity.
• Prior people‑management or team‑leadership experience strongly preferred.
• Deep expertise across Cloud Security, Security Architecture, VAPT, Application Security, DevSecOps and Defensive Security.
• Proven ability to lead security programmes and manage cross‑functional initiatives.
• Extensive knowledge of GCP, AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management.

Required skills

• GCP
• AWS
• IAM
• CSPM
• SIEM
• EDR/XDR
• SAST
• DAST
• SCA
• Container security
• Vulnerability management
• Penetration testing
• Red‑team / Purple‑team engagements
• Endpoint security
• Network and firewall security
• Security automation
• Security tooling development
• Cloud security
• Security architecture
• VAPT
• Application security
• DevSecOps
• Defensive security