Tabby

Information Security Specialist (GRC)

Tanger-Tétouan-Al Hoceïma

CDI / Temps pleinSur site1–3 ansLicence / Bac+3AnglaisSécuritéServices financiers

L’essentiel du poste

Résumé par Postule AI

Information Security Specialist (GRC) role at Tabby, a fast-growing fintech company. The position requires independently executing governance, risk, and compliance activities including policy development, risk assessments, compliance monitoring against multiple frameworks (SAMA CSF, ISO 27001, PCI-DSS, PDPL, NCA ECC), and audit coordination. Ideal for professionals with 1–3 years of hands-on experience in security governance, risk management, or compliance, preferably in regulated fintech or banking environments.

Vos missions

  • Maintain and update information security governance framework documentation, policies, standards, and procedures; coordinate security governance committee meetings.
  • Execute information security risk assessments independently, producing risk registers with identified threats, vulnerabilities, and treatment plans.
  • Monitor compliance posture against SAMA CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS; coordinate internal and external audit activities.
  • Maintain information asset registers and conduct control effectiveness evaluations for key information security controls.
  • Develop and maintain security awareness programmes with training materials and completion tracking; prepare KPI/KRI dashboards for senior management.
  • Support integration of information security requirements into procurement, project management, and change control processes.

Profil recherché

  • You have 1–3 years of hands-on experience in information security governance, risk management, or compliance.
  • You are detail-oriented and comfortable independently executing risk assessments and compliance monitoring activities.
  • You have experience with regulatory frameworks such as SAMA CSF, ISO 27001, PCI-DSS, or PDPL.
  • You are pursuing or hold ISO 27001, CompTIA Security+, CRISC, or CISM certifications.
  • You thrive in a fast-paced fintech environment and want to grow with a rapidly expanding organization.

Généré automatiquement à partir de l’offre. Postule AI peut se tromper : vérifiez auprès de l’employeur.

About the Role

Join Tabby as an Information Security Specialist (GRC) to independently execute governance, risk, and compliance activities across our information security programme. This role is ideal for a detail-oriented professional with hands-on experience in security governance, risk management, and compliance frameworks.

Key Responsibilities

Information Security Governance
  • Maintain and update information security governance framework documentation, policy library, standards, and procedures.
  • Draft and revise information security policies, standards, and baselines aligned with regulatory requirements and business objectives.
  • Monitor and track changes in legal, regulatory, and contractual requirements (SAMA CSF, PDPL, NCA ECC, PCI-DSS), updating compliance registers.
  • Coordinate security governance committee meetings, preparing agendas, minutes, and action tracking.
Information Risk Management
  • Execute information security risk assessments independently, producing complete risk registers with identified threats, vulnerabilities, and treatment plans.
  • Maintain and update information asset registers, tracking asset owners, classifications, and risk profiles.
  • Lead business impact assessment (BIA) data collection activities with asset owners and business units.
  • Conduct control effectiveness evaluations and coordinate third-party information security risk assessments.
Compliance & Programme Development
  • Monitor compliance posture against SAMA CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS, tracking control status and coordinating remediation.
  • Coordinate internal and external audit activities, gathering evidence and tracking findings.
  • Maintain and enhance the security awareness programme with training materials and completion tracking.
  • Monitor KPIs and KRIs, preparing dashboards for senior management review.

Required Skills & Qualifications

  • Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Risk Management, or related field.
  • 1–3 years of professional experience in information security governance, risk management, or compliance with hands-on experience in risk assessment, policy development, or compliance monitoring.
  • ISO 27001 Foundation or Lead Implementer certification (preferred); CompTIA Security+ or equivalent.
  • Working toward CRISC or CISM certification.
  • Prior exposure to SAMA CSF, ISO 27001, PDPL, or NCA ECC; experience in regulated Fintech or banking environments is preferred.

Why Join Tabby?

  • Work with an international team of inspired professionals across the globe.
  • Inclusive company culture embracing diversity, integrity, and transparency with strong work-life balance.
  • 100% trust and freedom to apply your vision from day 1; employee stock options available for everyone.
  • Opportunity to grow in one of the fastest-growing fintech companies in the region.
  • Relocation support and all necessary work devices provided.

Mise en forme par Postule ·

Signaler un problème