Information Security Manager

About The Role

The Information Security Lead is responsible for driving the organization’s information security program by acting as a supervisory and control organization on top of the security engineering division. The scope for this role will be ensuring that technology and security engineering are governed, cyber risk is managed, and cybersecurity regulatory requirements are met through building high-level technical and policy guidelines and monitoring operational execution. Also, this role ensures that security controls and practices are aligned with business objectives, regulatory requirements, and recognized industry frameworks.

As a senior member of the security function, the Information Security Lead manages the Information Security function and partners closely with Security Engineering to deliver a cohesive, risk-informed, and compliant security program. The role works cross-functionally with Legal, Engineering, Product, and Operations teams to maintain a mature and resilient security posture.

What You'll Do

• Supervise security engineering practices and ensure their secure, efficient operations.
• Lead the development, implementation, and continuous improvement of the organization’s information security program.
• Lead adversary research, threat modeling, risk assessment and supervise defense control selection for products, infrastructure, and third-party services and products.
• Oversee identity and access management (IAM) strategies, tooling, and implementation.
• Define and monitor key performance indicators to measure technical security maturity, control effectiveness, and overall capabilities progress of the security program.
• Ensure traceability and consistency across policies, risks, and controls.
• Lead on the security awareness training program, tooling, and continuous KPI improvement.
• Provide strategic guidance on the security implications of business initiatives, projects, and technology choices.
• Implement and maintain automated supervision tooling (e.g., Sprinto or custom integrations) to support governance reporting.
• Establish and maintain technical security guidelines, policies, standards, and procedures aligned with business needs, regulatory obligations (e.g., CMA, ADGM, FRA), and frameworks such as ISO 27001, NIST CSF, and PCI DSS.
• Manage, maintain, and evolve the information security risk register and risk management framework (e.g., NIST RMF).
• Lead, mentor, and develop members of the information security team.
• Serve as a trusted advisor to senior management on information security posture.
• Prepare clear, actionable reports and recommendations for executive stakeholders and governance committees.

What You'll Need

• Experience: 7+ years of experience in information security, with proven leadership in governance, risk, and compliance.
• Education: Bachelor’s degree in Information Security, Computer Science, Risk Management, or a related field.
• Certifications: CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor preferred.
• Knowledge: Strong understanding of frameworks such as ISO 27001, NIST CSF, PCI DSS, SOC 2, and relevant regional regulations (CMA, ADGM, FRA, GDPR).
• Leadership: Ability to lead cross-functional initiatives and influence at all organizational levels.
• Communication: Exceptional written and verbal communication skills, with the ability to convey complex security concepts to diverse audiences.

Who Are We?

Thndr was founded on a bold dream to democratize access to investing through smart tech and human-centric design. This is simply our way of saying we give anyone with a smartphone the simple and easy access they need to preserve and grow their wealth. At the same time, we’re shaping the future of investing while actively driving the economies we serve by promoting local investment products.

History has shown that investing is the single greatest way to build long-term wealth, but before Thndr, only a very small percentage of people had access to it due to:

• High barriers to entry — In the form of excessive minimum account balances, complex, outdated onboarding, and low financial literacy.

• Irrelevant experience — Catered toward expert traders and financial specialists, therefore alienating the majority of the population.

• Fragmented offering — Investment products were not gathered in a single, intuitive outlet.

We don't just talk about change, we deliver it. Here's a glimpse into our impact so far:

• 3 million app downloads

• $8.8bn in annualized traded value

• #1 platform in terms of traded value

• 84% of our users are investing for the first time

• 65% of our users come from outside of capital cities and have previously had limited access to financial institutions

Building on the success of our core platform, we are continuing to change culture and break down barriers by launching Rumble, the subscription-based investment recommendations platform.

Rumble was born with the vision to empower everyday individuals to build wealth confidently and intelligently through access to timely and in-depth advice from the industry’s top experts.

Going beyond traditional investment advice, it offers long and short-term investment recommendations and financial content through engaging articles and videos that guide users on their financial journey and maximize their returns.

At Thndr, we're looking for people driven by our mission to help us democratize investing across the MENA region.