qlub removes the friction at the end of a great meal. Guests scan a QR code and pay in seconds. No app, no download, no waiting. We handle the full payment experience so restaurants can focus on what they do best: great hospitality. Less friction means faster table turnover, smoother operations, and higher profit. We're a fast-scaling fintech backed by Mastercard, Mubadala, e& and Shorooq. $72M raised, live across multiple markets worldwide, and headcount doubled in the past year.
🏢 About qlub
From Pay-at-Table and Digital Menus to Order-and-Pay, Payment Links, and SoftPOS terminals, we handle the full payment experience so restaurants can focus on what they do best: great hospitality. Less friction means faster table turnover, smoother operations, and higher profit.
🎯 The Role
As qlub expands across markets, so do our security challenges. From protecting our payments platform to meeting regulatory requirements and earning customer trust, security plays a critical role in how we grow. We are looking for a Cybersecurity Engineer to own our day-to-day security compliance and customer assurance including maintaining security standards and certifications, managing audits and supporting customer security assessments. This isn't a role limited to compliance checklists. You'll be part of our security team, working closely with engineering and teams across the business.
✅ Key Responsibilities
Own day-to-day security compliance and ISMS activities across ISO 27001, PCI DSS, SOC 2 readiness and applicable regulatory requirements.
Manage internal and external audits, certifications and assessments end to end including auditor engagement, evidence validation and corrective action closure.
Own customer security questionnaires, due diligence and security assessments, working directly with business stakeholders and customer security teams.
Maintain security policies, risk assessments and control documentation, assess control effectiveness and drive compliance findings to closure.
Coordinate third-party security reviews, support data protection and security awareness activities and maintain continuous compliance monitoring.
Contribute to security operations including SIEM/EDR monitoring, threat detection, incident investigations, cloud security and vulnerability management.
Support application security and DevSecOps initiatives including secure SDLC practices, CI/CD security integration, SAST/DAST/SCA and vulnerability validation.
Leverage automation and AI to streamline security assessments, compliance activities and operational workflows.
📌 Required Qualifications
You take initiative, exercise sound judgement and drive work forward independently.
You are curious, resourceful and quick to learn unfamiliar tools, technologies and frameworks.
You communicate clearly, collaborate across teams and stay effective when priorities change.
You actively embrace AI to solve problems, automate repetitive work and find smarter ways to get things done.
Bachelor’s degree in Information Security, Computer Science or a related field.
3+ years of hands-on experience in cybersecurity or information security, including security compliance, assurance or GRC.
Hands-on experience maintaining an ISO 27001 ISMS, coordinating audits, validating controls and managing compliance evidence.
Experience handling customer security questionnaires, due diligence assessments and working with auditors and cross-functional teams.
Working knowledge of PCI DSS, security risk management and frameworks such as NIST CSF.
Solid technical foundations in cloud and SaaS architectures, networking, identity and access management and web security including OWASP Top 10.
Strong analytical, problem-solving and communication skills with fluency in English.
Familiarity with AI-assisted tools for research, analysis and automation with the judgment to validate outputs and handle sensitive information responsibly.
⭐ Desirable Experience
Experience in fintech, payments or cloud-based SaaS environments.
Familiarity with UAE IA/NESA, SOC 2 or GDPR requirements.
Experience with GRC platforms and security workflow automation.
Hands-on experience with cloud security (AWS/GCP), SIEM/EDR platforms such as CrowdStrike/Splunk or detection engineering.
Practical experience conducting web, API or mobile penetration testing.
Relevant certifications such as ISO 27001 Lead Auditor, CISA, eWPTx or OSCP are valued.
🎁 Benefits
Real ownership over products that impact millions of diners and thousands of restaurants globally
The opportunity to solve challenging problems in payments, hospitality, and customer experience
A fast-moving environment where great ideas quickly become reality
Close collaboration with experienced operators, builders, and industry experts
A chance to leave a visible mark on one of the fastest-growing restaurant technology companies globally
