Tabby jobs

<h3>About the Internship</h3><p>Tabby is offering an internship for a People Operations Intern within the CX team. This 3-6 month Co-op / Tamheer training program provides hands-on experience in supporting the People Operations team to deliver accurate, compliant, and employee-centric HR services. The intern will learn core people operations processes and assist with daily HR transactions under close supervision.</p><h3>Role Overview</h3><p>The People Operations Intern will develop practical knowledge of Saudi labor regulations and government platforms. This role contributes to data integrity, process improvement, and maintaining a consistent, positive employee experience across the organization. The intern will work closely with senior team members to ensure all tasks are completed accurately and efficiently.</p><h3>Key Responsibilities</h3><ul><li>Assist in maintaining accurate employee data for KSA employees by processing routine updates under close supervision.</li><li>Support employee lifecycle transactions, including new hire documentation, employee record updates, and transfers, with guidance from senior team members.</li><li>Assist with periodic data audits by validating records and flagging discrepancies for review.</li><li>Help keep HR systems up to date and support data alignment across HR platforms in coordination with the team.</li><li>Respond to routine employee HR inquiries under guidance, ensuring a professional and service-oriented experience, and escalate questions to senior team members as needed.</li><li>Support the processing of standard employee requests, including HR letters, salary certificates, leave balance inquiries, and basic employee data updates.</li><li>Assist in preparing documentation for GOSI registrations, updates, and removals, ensuring completeness and accuracy.</li><li>Support medical insurance enrollment tasks and help employees with basic queries.</li><li>Assist in preparing Qiwa contract documentation under guidance.</li><li>Support onboarding and offboarding coordination, including documentation, system updates, and clearance steps in line with procedures.</li><li>Support the preparation of basic reports and data summaries for senior HR team review.</li><li>Maintain organized and accurate employee records to support audits and internal reviews.</li><li>Contribute ideas for process improvements and perform additional tasks as assigned by the team.</li></ul><h3>Qualifications and Experience</h3><ul><li>0-1 years of experience.</li><li>Foundational knowledge of KSA people operations requirements and government systems (*, GOSI, Qiwa, Mudad) will be developed during the internship.</li></ul><h3>Work Type</h3><p>This is an internship position designed for individuals seeking practical experience in People Operations.</p><h3>Application Process</h3><p>Candidates interested in this internship opportunity are encouraged to apply.</p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> At Tabby, we are on a mission to deliver world-class partner experiences that set the standard in fintech. As a <strong>Partner Support Specialist</strong>, you will be the front line of communication with our merchants and applicants — ensuring every interaction builds trust, resolves issues quickly, and strengthens our relationships.<br><br><br>You will support partners across multiple channels (chat, email, phone), resolve operational and business inquiries, and play a key role in driving key metrics such as <strong>Customer Satisfaction (CSAT), First Contact Resolution (FCR), and Adherence</strong>. This is a role for someone who thrives in a fast-paced environment, can balance empathy with accuracy, and takes ownership of delivering outcomes.<br> <br> Key Responsibilities<br><ul><li><strong>Partner Communication &amp; Issue Resolution</strong><ul><li>Provide support to Tabby partners and applicants across chat, email, and phone.</li><li>Handle escalations with professionalism and ensure fair application of PS policies (DAT, Hold Timer, CSAT fraud checks).</li><li>Ensure accurate, timely resolution in line with SLAs and process guidelines.<br></li></ul></li><li><strong>Process Adherence &amp; Quality</strong><ul><li>Apply Partner Support procedures and knowledge-base materials consistently.</li><li>Maintain high QA standards by following templates, knowledge cards, and approved flows.</li><li>Escalate complex cases via side-ticketing and ensure traceable handovers to TLs or other functions.<br></li></ul></li><li><strong>Continuous Improvement</strong><ul><li>Capture insights from partner queries to help identify gaps in workflows and policies.</li><li>Suggest improvements that enhance FCR and CSAT performance.</li><li>Stay current on product, scoring, finance, and payout processes to provide accurate guidance.<br></li></ul></li><li><strong>Collaboration &amp; Business Alignment</strong></li><li>Work closely with Scoring, Finance, BD, and Product teams to ensure smooth end-to-end partner journeys.</li><li>Support colleagues in achieving collective targets and maintaining a high-performance culture.</li></ul> <br> Skills, Knowledge and Expertise<br><ul><li>Strong fluency in <strong>Arabic and English</strong> (both written and verbal).</li><li>Bachelor’s degree or higher (business, finance, marketing, operations, or related field preferred).</li><li>Experience in <strong>B2B support, call center, or customer operations</strong> is a plus.</li><li>Excellent communication, problem-solving, and relationship-building skills.</li><li>High attention to detail and ability to follow structured processes.</li><li>Resilience and confidence in handling demanding partners and escalations.</li><li>Analytical mindset and ability to turn data/feedback into action.</li><li>Self-motivated with strong ownership and accountability.</li></ul> <br> Benefits<br><ul><li><strong>Monthly Bonus</strong> tied to achieving operational KPIs (CSAT, FCR).</li><li><strong>Bonus Multiplier</strong> for month-over-month performance improvement.</li><li><strong>Growth Opportunities</strong> within Tabby based on business needs and results.</li></ul> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5"> Preferred candidate </h2> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Years_of_experience"> <b>Years of experience</b> </div> <div class="col is-9 p5" data-automation-id="data_Years_of_experience"> No experience required </div> </div> <div class="row is-m v-align-top t-small "> <div class="col is-3 p5" data-automation-id="label_Nationality"> <b>Nationality</b> </div> <div class="col is-9 p5" data-automation-id="data_Nationality"> Saudi Arabia </div> </div> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Degree"> <b>Degree</b> </div> <div class="col is-9 p5" data-automation-id="data_Degree"> Bachelor's degree / higher diploma </div> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> As a People Operations Intern, you will gain hands-on experience supporting the<br>People Ops team in delivering accurate, compliant, and employee-centric HR<br>services during a 3–6 month Co-op / Tamheer training program.<br>In this role, you will learn core people operations processes, assist with day-to-<br>day HR transactions under close supervision, and build practical knowledge of<br>Saudi labor regulations and government platforms. You will contribute to data<br>integrity, process improvement, and a consistent, positive employee experience<br>across the organization.<br> <br> Key Responsibilities<br><ul><li>Assist in maintaining accurate employee data for KSA employees by processing routine updates under close supervision.</li><li>Support employee lifecycle transactions such as new hire documentation, employee record updates, and transfers, with guidance from senior team members.</li><li>Assist with periodic data audits by validating records and flagging discrepancies for review.</li><li>Help keep HR systems up to date and support data alignment across HR platforms in coordination with the team.</li><li>Respond to routine employee HR inquiries under guidance, ensuring a professional and service-oriented experience, and escalate questions to senior team members as needed.</li><li>Support the processing of standard employee requests, including HR letters, salary certificates, leave balance inquiries, and basic employee data updates.</li><li>Assist in preparing documentation for GOSI registrations, updates, and removals, ensuring completeness and accuracy.</li><li>Support medical insurance enrollment tasks and help employees with basic queries.</li><li>Assist in preparing Qiwa contract documentation under guidance.</li><li>Develop foundational knowledge of KSA people operations requirements and government systems (e.g., GOSI, Qiwa, Mudad).</li><li>Support onboarding and offboarding coordination, including documentation, system updates, and clearance steps in line with procedures.</li><li>Support the preparation of basic reports and data summaries for senior HR team review.</li><li>Maintain organized and accurate employee records to support audits and internal reviews.</li><li>Contribute ideas for process improvements and perform additional tasks as assigned by the team.</li></ul> <br> Skills, Knowledge and Expertise<br><ul><li>Currently pursuing or recently completed a Bachelor’s degree in Human Resources, Business Administration, or a related field.</li><li>No prior work experience required; coursework, volunteering, or project exposure to HR is a plus.</li><li>Eligible for a Co-op / Tamheer training program (3–6 months).</li><li>Familiarity with Google Workspace; exposure to HR systems (e.g., BambooHR, Jira) is a plus.</li><li>Interest in Saudi labor laws and HR regulations, with a willingness to learn government platforms such as GOSI and Qiwa.</li><li>Strong communication and interpersonal skills, with the ability to interact professionally across teams.</li><li>High attention to detail, strong organizational skills, and eagerness to learn in a fast-paced environment.</li><li>Arabic: Native — spoken and written</li><li>English: Professional proficiency — spoken and written.</li></ul> <br> Job Benefits<br><ul><li>We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees.</li><li>Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone.&nbsp;</li><li>You will have an opportunity to learn and grow in one of the fastest growing fintech companies in the region</li><li>We’ll set you up with the devices required for your work.</li></ul> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5"> Preferred candidate </h2> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Years_of_experience"> <b>Years of experience</b> </div> <div class="col is-9 p5" data-automation-id="data_Years_of_experience"> 1+ years </div> </div> <div class="row is-m v-align-top t-small "> <div class="col is-3 p5" data-automation-id="label_Degree"> <b>Degree</b> </div> <div class="col is-9 p5" data-automation-id="data_Degree"> Bachelor's degree / higher diploma </div> </div>

<h3><strong>About the Role</strong></h3><p>Tabby is seeking a <strong>Compliance Officer</strong> to support the effective implementation and ongoing management of its compliance framework. This full-time role is crucial for ensuring adherence to SAMA regulatory requirements, applicable laws, and internal policies. The Compliance Officer will provide day-to-day advisory support to business functions and independently perform various compliance activities.</p><h3><strong>Key Responsibilities</strong></h3><ul><li>Support the implementation and ongoing management of the organization's compliance framework in line with SAMA regulations and applicable regulatory requirements.</li><li>Monitor SAMA circulars, regulatory updates, guidance, and relevant industry developments, assessing their impact on the organization's activities.</li><li>Conduct regulatory research and analysis, translating applicable requirements into practical compliance actions and internal requirements.</li><li>Support the development, review, and maintenance of compliance policies, procedures, standards, and controls.</li><li>Perform compliance monitoring and testing activities to assess adherence to regulatory requirements, policies, procedures, and established controls.</li><li>Conduct compliance risk assessments, identifying potential regulatory risks, control gaps, and areas requiring remediation.</li><li>Maintain regulatory obligations trackers and monitor the implementation and completion of SAMA regulatory requirements across relevant business functions.</li><li>Provide day-to-day compliance advisory support to business teams on SAMA regulatory requirements, policies, processes, and operational activities.</li><li>Review products, services, processes, partnerships, and business initiatives to identify applicable compliance requirements and potential regulatory risks.</li><li>Support the preparation, review, and submission of regulatory reports and other required regulatory communications.</li><li>Conduct compliance reviews and assessments relating to potential regulatory breaches, policy violations, and control weaknesses.</li><li>Document compliance findings, recommendations, and remediation actions, monitoring progress against agreed timelines.</li><li>Support investigations into potential compliance breaches and regulatory issues, escalating material or complex matters to the Compliance Manager.</li><li>Support regulatory examinations, internal audits, and independent compliance reviews by preparing documentation, coordinating responses, and tracking remediation activities.</li><li>Maintain accurate and up-to-date compliance registers, records, trackers, and supporting documentation.</li><li>Prepare compliance reports, monitoring results, regulatory updates, risk assessments, and other materials for management review.</li><li>Support the development and delivery of compliance training and awareness activities.</li><li>Collaborate with Risk, Legal, Internal Audit, Operations, Information Security, and business teams to strengthen compliance controls and address regulatory requirements.</li><li>Identify opportunities to improve compliance processes, controls, monitoring activities, and reporting.</li><li>Escalate material compliance risks, breaches, control deficiencies, and regulatory concerns to the Compliance Lead in a timely manner.</li></ul><h3><strong>Experience Required</strong></h3><p>Candidates should possess <strong>3 years of experience</strong> in a relevant compliance role. The ideal candidate will have a strong understanding of regulatory requirements and compliance frameworks, particularly those related to SAMA.</p><h3><strong>Work Type</strong></h3><p>This is a <strong>full-time position</strong> within Tabby.</p><h3><strong>Application Process</strong></h3><p>We invite qualified candidates to apply for this role to contribute to Tabby's compliance efforts.</p>

<p>About the role We're looking for a Senior Product Designer to join our BNPL stream and design the merchant side of Tabby's core product. You'll work on the Merchant Dashboard , across web and the mobile app, the place where merchants run their business with Tabby: manage transactions, settlements and invoices, set up in-store and integrations, and use self-service tools. You'll join a newly formed Merchant Experience team with a lot of attention on it and a lot to build: upgrading core dashboard pages, launching new self-service products, running merchant experiments, and rethinking how Tabby works in physical stores. We're looking for someone who thrives on complexity, turns uncertainty into clarity, owns problems end to end, and brings strong product thinking alongside strong craft.</p> <ul> <li>Own merchant journeys in the Merchant Dashboard end to end, across web and mobile, from early concept through polished execution</li> <li>Upgrade core dashboard pages such as transactions, settlements and invoices, and design new self-service tools for merchants</li> <li>Design clear, data-dense interfaces that make complex financial and operational information easy to understand and act on</li> <li>Design and iterate on merchant experiments and new features with your Product Manager, and measure what works</li> <li>Help reimagine the in-store experience together with product and engineering</li> <li>Collaborate closely with Product Managers, Engineers and our UX researcher and UX writer to identify and solve key merchant problems</li> <li>Use data, merchant feedback and research insights to inform design decisions and validate hypotheses</li> <li>Partner with designers from other B2B and B2C streams to keep the experience consistent across Tabby, and contribute to the design system</li> <li>Use AI tools in your day-to-day workflow: prototyping, ideation, and moving solutions closer to code</li> <li>Present and advocate for your work to cross-functional and senior stakeholders, ensuring clarity and alignment</li> </ul><p><strong>Desired Candidate Profile</strong></p><ul> <li>Proven experience designing digital products, ideally B2B, fintech, or complex data-rich tools</li> <li>Strong craft skills demonstrated through a portfolio, with excellent Figma skills</li> <li>Comfort designing across both web/dashboard and native mobile (iOS and Android)</li> <li>Strong product thinking: you understand business goals, product logic and user needs, and can explain the reasoning behind your decisions</li> <li>Ability to turn uncertainty into clarity and handle complex flows, states and edge cases</li> <li>A strong level of AI proficiency: you use AI tools on real project work to prototype, explore and move faster</li> <li>Understanding of technical constraints and the ability to collaborate effectively with engineering</li> <li>Confident in your work and strong communication skills, whether you're talking to another designer or a C-level executive</li> <li>Experience applying systems thinking and contributing to shared design systems</li> <li>Autonomy: you operate without close supervision and manage multiple priorities in a fast-paced environment</li> <li>Fluency in English</li> </ul> <p>Nice to have</p> <ul> <li>Experience in fintech or financial products</li> <li>Experience conducting UX research</li> <li>A strong base in graphic design</li> <li>Experience designing for GCC markets or Arabic/RTL interfaces</li> <li>Comfort working close to code, with interest in contributing to code through AI tools</li> </ul>

<p>As the Compliance Officer, you will support the effective implementation and ongoing management of the organization's compliance framework to ensure adherence to SAMA regulatory requirements, applicable laws, and internal policies. You will independently perform compliance monitoring, regulatory analysis, risk assessments, regulatory obligations tracking, and compliance reviews, while providing day-to-day advisory support to business functions. Support the implementation and ongoing management of the organization's compliance framework in line with SAMA regulations and applicable regulatory requirements. Monitor SAMA circulars, regulatory updates, guidance, and relevant industry developments and assess their impact on the organization's activities. Conduct regulatory research and analysis and translate applicable requirements into practical compliance actions and internal requirements. Support the development, review, and maintenance of compliance policies, procedures, standards, and controls. Perform compliance monitoring and testing activities to assess adherence to regulatory requirements, policies, procedures, and established controls. Conduct compliance risk assessments and identify potential regulatory risks, control gaps, and areas requiring remediation. Maintain regulatory obligations trackers and monitor the implementation and completion of SAMA regulatory requirements across relevant business functions. Provide day-to-day compliance advisory support to business teams on SAMA regulatory requirements, policies, processes, and operational activities. Review products, services, processes, partnerships, and business initiatives to identify applicable compliance requirements and potential regulatory risks. Support the preparation, review, and submission of regulatory reports and other required regulatory communications. Conduct compliance reviews and assessments relating to potential regulatory breaches, policy violations, and control weaknesses. Document compliance findings, recommendations, and remediation actions and monitor progress against agreed timelines. Support investigations into potential compliance breaches and regulatory issues, escalating material or complex matters to the Compliance Manager. Support regulatory examinations, internal audits, and independent compliance reviews by preparing documentation, coordinating responses, and tracking remediation activities. Maintain accurate and up-to-date compliance registers, records, trackers, and supporting documentation. Prepare compliance reports, monitoring results, regulatory updates, risk assessments, and other materials for management review. Support the development and delivery of compliance training and awareness activities. Work closely with Risk, Legal, Internal Audit, Operations, Information Security, and business teams to strengthen compliance controls and address regulatory requirements. Identify opportunities to improve compliance processes, controls, monitoring activities, and reporting. Escalate material compliance risks, breaches, control deficiencies, and regulatory concerns to the Compliance Lead in a timely manner.</p><p><strong>Desired Candidate Profile</strong></p><p>Bachelor's degree in Law, Finance, Business Administration, Accounting, Risk Management, Compliance, or a related discipline. At least 3 years of experience in Compliance, Regulatory Compliance, Risk Management, Governance, Audit, or a related function, preferably within banking, financial services, fintech, or another regulated environment. Good working knowledge of SAMA regulatory requirements and applicable Saudi financial services regulations. Good understanding of compliance frameworks, SAMA regulatory obligations, compliance monitoring and testing, risk assessments, and internal controls. Experience conducting compliance monitoring, regulatory research, compliance reviews, risk assessments, or related compliance activities. Experience developing, reviewing, and maintaining compliance policies, procedures, and controls. Ability to interpret SAMA regulatory requirements and translate them into practical business requirements and compliance actions. Experience supporting regulatory examinations, internal audits, compliance reviews, investigations, and remediation activities. Strong analytical and problem-solving skills, with the ability to identify regulatory risks and recommend appropriate actions. Strong communication and stakeholder management skills, with the ability to work effectively with business and control functions. Strong attention to detail and ability to maintain accurate compliance documentation and records. Ability to manage multiple priorities and work independently on assigned compliance activities in a fast-paced regulated environment. High level of integrity, professionalism, confidentiality, and sound regulatory judgment. Compliance certification such as CAMS, CCO, or an equivalent certification is preferred. Additional certifications in risk management, governance, financial crime, or regulatory compliance are considered an advantage.</p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <strong>Tabby</strong> creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money.<br>The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.<br>Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.<br>Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion.<br>As <strong>Information Security Engineer</strong>, you’ll play a key part in monitoring and defending our infrastructure, applications, and cloud environments from cyber threats.&nbsp;<br><br>You’ll lead incident response efforts, develop and tune detection rules, investigate security events, and collaborate with cross-functional teams to strengthen our security posture.<br> <br> Key Responsibilities<br><strong>Security Monitoring &amp; Detection</strong><br><ul><li>Monitor and analyze logs and alerts from a wide range of sources including firewalls, intrusion detection/prevention systems (IDS/IPS), endpoints, servers, and cloud platforms.</li><li>Perform correlation of events from multiple sources to identify advanced threats and unusual patterns of behavior.</li><li>Fine-tune alert thresholds and detection logic to reduce false positives and improve signal-to-noise ratio.</li><li>Maintain dashboards and reporting to provide real-time visibility into security posture.<br></li></ul><strong>Incident Response &amp; Investigation</strong><br><ul><li>Serve as a frontline responder for security incidents, managing incidents through their lifecycle – detection, containment, eradication, recovery, and lessons learned.</li><li>Coordinate with internal stakeholders and external vendors during high-severity incidents or data breaches.</li><li>Perform root cause analysis and forensic investigations using endpoint and network-based artifacts.</li><li>Maintain detailed incident documentation and contribute to post-mortem analysis and reports.<br></li></ul><strong>Threat Intelligence &amp; Detection Rule Development</strong><br><ul><li>Research emerging threats and trends.&nbsp;</li><li>Contribute to the creation and tuning of detection rules, threat-hunting queries, and use cases across multiple platforms including cloud environments.</li><li>Maintaining CTI Platform along with the integration of the CTI feeds with the security controls to have active CTI driven detections.<br></li></ul><strong>Collaboration and Communication</strong><br><ul><li>Communicate effectively with cross-functional teams including IT, DevOps, Risk, and Compliance during incidents and investigations.</li><li>Provide concise and clear updates during incident handling to stakeholders and management.</li><li>Mentor junior analysts and assist in training efforts within the SOC team.</li></ul> <br> Skills, Knowledge and Expertise<br><ul><li>2–3 years of experience in a SOC or cybersecurity operations role, ideally in a fast-paced fintech or enterprise environment.</li><li>Strong knowledge of security best practices, including incident handling, alert triage, log analysis, and threat modeling.</li><li>Understanding of online technologies, REST APIs, microservices, and modern application architectures.</li><li>Experience working in a culturally diverse and collaborative environment.</li><li>Familiarity with DLP, AV, and anti-malware systems from an operational monitoring perspective.</li><li>Experience with phishing detection, user behavior analytics, and security awareness campaigns.</li><li>Security certifications such as Security+, CySA+, eCIR, eCTHPv2, GCIA, or GMON (preferred but not required).</li><li>Strong communication skills, especially for coordinating incident response and writing clear incident reports.</li><li>Experience with <strong>SIEM platforms</strong>, <strong>SOAR tools</strong>, <strong>EDR/XDR</strong>, and <strong>Threat Intelligence platforms</strong>.</li><li>Familiarity with cloud environments and cloud-native logging and monitoring tools.</li><li>Scripting experience (e.g., <strong>Python</strong>) to automate tasks and improve SOC efficiency.</li></ul> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5"> Preferred candidate </h2> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Years_of_experience"> <b>Years of experience</b> </div> <div class="col is-9 p5" data-automation-id="data_Years_of_experience"> No experience required </div> </div> <div class="row is-m v-align-top t-small "> <div class="col is-3 p5" data-automation-id="label_Degree"> <b>Degree</b> </div> <div class="col is-9 p5" data-automation-id="data_Degree"> Bachelor's degree / higher diploma </div> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> As the Compliance Officer, you will support the effective implementation and ongoing management of the organization's compliance framework to ensure adherence to SAMA regulatory requirements, applicable laws, and internal policies. You will independently perform compliance monitoring, regulatory analysis, risk assessments, regulatory obligations tracking, and compliance reviews, while providing day-to-day advisory support to business functions.<br> <br> Key Responsibilities<br><ul><li>Support the implementation and ongoing management of the organization's compliance framework in line with SAMA regulations and applicable regulatory requirements.<br></li><li>Monitor SAMA circulars, regulatory updates, guidance, and relevant industry developments and assess their impact on the organization's activities.<br></li><li>Conduct regulatory research and analysis and translate applicable requirements into practical compliance actions and internal requirements.<br></li><li>Support the development, review, and maintenance of compliance policies, procedures, standards, and controls.<br></li><li>Perform compliance monitoring and testing activities to assess adherence to regulatory requirements, policies, procedures, and established controls.<br></li><li>Conduct compliance risk assessments and identify potential regulatory risks, control gaps, and areas requiring remediation.<br></li><li>Maintain regulatory obligations trackers and monitor the implementation and completion of SAMA regulatory requirements across relevant business functions.<br></li><li>Provide day-to-day compliance advisory support to business teams on SAMA regulatory requirements, policies, processes, and operational activities.<br></li><li>Review products, services, processes, partnerships, and business initiatives to identify applicable compliance requirements and potential regulatory risks.<br></li><li>Support the preparation, review, and submission of regulatory reports and other required regulatory communications.<br></li><li>Conduct compliance reviews and assessments relating to potential regulatory breaches, policy violations, and control weaknesses.<br></li><li>Document compliance findings, recommendations, and remediation actions and monitor progress against agreed timelines.<br></li><li>Support investigations into potential compliance breaches and regulatory issues, escalating material or complex matters to the Compliance Manager.<br></li><li>Support regulatory examinations, internal audits, and independent compliance reviews by preparing documentation, coordinating responses, and tracking remediation activities.<br></li><li>Maintain accurate and up-to-date compliance registers, records, trackers, and supporting documentation.<br></li><li>Prepare compliance reports, monitoring results, regulatory updates, risk assessments, and other materials for management review.<br></li><li>Support the development and delivery of compliance training and awareness activities.<br></li><li>Work closely with Risk, Legal, Internal Audit, Operations, Information Security, and business teams to strengthen compliance controls and address regulatory requirements.<br></li><li>Identify opportunities to improve compliance processes, controls, monitoring activities, and reporting.<br></li><li>Escalate material compliance risks, breaches, control deficiencies, and regulatory concerns to the Compliance Lead in a timely manner.<br></li></ul> <br> Skills, Knowledge and Expertise<br><ul><li>Bachelor's degree in Law, Finance, Business Administration, Accounting, Risk Management, Compliance, or a related discipline.</li><li>At least 3 years of experience in Compliance, Regulatory Compliance, Risk Management, Governance, Audit, or a related function, preferably within banking, financial services, fintech, or another regulated environment.</li><li>Good working knowledge of SAMA regulatory requirements and applicable Saudi financial services regulations.</li><li>Good understanding of compliance frameworks, SAMA regulatory obligations, compliance monitoring and testing, risk assessments, and internal controls.</li><li>Experience conducting compliance monitoring, regulatory research, compliance reviews, risk assessments, or related compliance activities.</li><li>Experience developing, reviewing, and maintaining compliance policies, procedures, and controls.</li><li>Ability to interpret SAMA regulatory requirements and translate them into practical business requirements and compliance actions.</li><li>Experience supporting regulatory examinations, internal audits, compliance reviews, investigations, and remediation activities.</li><li>Strong analytical and problem-solving skills, with the ability to identify regulatory risks and recommend appropriate actions.</li><li>Strong communication and stakeholder management skills, with the ability to work effectively with business and control functions.</li><li>Strong attention to detail and ability to maintain accurate compliance documentation and records.</li><li>Ability to manage multiple priorities and work independently on assigned compliance activities in a fast-paced regulated environment.</li><li>High level of integrity, professionalism, confidentiality, and sound regulatory judgment.</li><li>Compliance certification such as CAMS, CCO, or an equivalent certification is preferred.</li><li>Additional certifications in risk management, governance, financial crime, or regulatory compliance are considered an advantage.</li></ul> <br> Benefits<br><ul><li>We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees.</li><li>Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone.&nbsp;</li><li>You will have an opportunity to learn and grow in one of the fastest growing fintech companies in the region</li><li>We offer you relocation support as well as we guide you through all the process.</li><li>We’ll set you up with the devices required for your work.</li></ul> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5"> Preferred candidate </h2> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Years_of_experience"> <b>Years of experience</b> </div> <div class="col is-9 p5" data-automation-id="data_Years_of_experience"> No experience required </div> </div> <div class="row is-m v-align-top t-small "> <div class="col is-3 p5" data-automation-id="label_Degree"> <b>Degree</b> </div> <div class="col is-9 p5" data-automation-id="data_Degree"> Bachelor's degree / higher diploma </div> </div>

<h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">About the Role</h3> <p style="margin:0 0 12px; **********<strong>;">Tabby is seeking a <strong style="font-weight:700;">Senior Cards Portfolio Manager</strong> to oversee the growth and overall health of its card program. This full-time role involves managing scheme relationships, ensuring compliance, and developing commercial strategies. The successful candidate will work closely with Card Scheme, Compliance, Risk, and Product teams to drive card issuance, activation, and usage, while maintaining alignment with scheme rules and regulatory requirements.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Role Context and Objectives</h3> <p style="margin:0 0 12px; </strong>********<strong>;">This position is critical for balancing commercial growth objectives with compliance demands within Tabby's card program. The Senior Cards Portfolio Manager will lead initiatives to expand the portfolio, manage key relationships with card schemes, and ensure all compliance obligations, from scheme mandates to regulatory requirements, are met. The role requires a professional who can maintain program integrity while actively pursuing growth opportunities.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Key Responsibilities</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Develop and execute the portfolio growth strategy for Tabby's card program, including driving growth across the funnel and identifying and implementing growth levers such as pricing, incentives, and partnerships.</li> <li style="margin:0 0 6px;">Manage daily relationships with card schemes, covering program reporting, mandates, incentives, and new scheme initiatives.</li> <li style="margin:0 0 6px;">Ensure continuous compliance of the card program with scheme rules, regulatory requirements, and internal risk policies.</li> <li style="margin:0 0 6px;">Collaborate with Compliance, Risk, and Legal departments to manage scheme audits, certifications, and regulatory filings pertinent to the card program.</li> <li style="margin:0 0 6px;">Monitor and report portfolio performance metrics, including activation, spend, and retention, as well as compliance status, to internal and external stakeholders.</li> <li style="margin:0 0 6px;">Stay informed of scheme rule changes and regulatory updates, translating them into actionable plans across the business.</li> <li style="margin:0 0 6px;">Work with Product and Engineering teams to prioritize features that support both growth and compliance objectives.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Qualifications and Experience</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">A minimum of 5-10 years of experience in portfolio growth management, specifically within card programs.</li> <li style="margin:0 0 6px;">Demonstrated ability to manage scheme relationships and navigate compliance obligations.</li> <li style="margin:0 0 6px;">Experience in driving commercial growth initiatives while maintaining regulatory adherence.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Work Type</h3> <p style="margin:0 0 12px; </strong>********<strong>;">This is a full-time position.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Application Information</h3> <p style="margin:0 0 12px; </strong>**********;">Salary details for this position will be disclosed during the interview process.</p>

<h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">About the Role</h3> <p style="margin:0 0 12px; **********<strong>;">Tabby is seeking a <strong style="font-weight:700;">Lead Auditor</strong> specializing in IT and Cyber Security Audit. This full-time role involves leading end-to-end execution of IT, cybersecurity, and technology audit engagements. The successful candidate will supervise engagement teams and deliver high-quality audit results in line with Tabby's technology risk-based audit plan.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Key Responsibilities</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Lead the planning and execution of assigned IT general controls, application controls, and cybersecurity audit engagements, from scoping through reporting.</li> <li style="margin:0 0 6px;">Develop detailed audit programs and risk and control matrices (RCMs) covering IT and cyber risk areas, aligned with the approved audit plan.</li> <li style="margin:0 0 6px;">Supervise and review the fieldwork of Senior Auditors, Auditors, and Interns assigned to engagements, ensuring quality and adherence to methodology.</li> <li style="margin:0 0 6px;">Conduct walkthroughs, technical interviews, and testing of IT general controls, application controls, network and endpoint security, identity and access management, and cloud configurations.</li> <li style="margin:0 0 6px;">Identify control gaps and root causes, and draft clear, actionable audit findings and recommendations on technology and cyber risk.</li> <li style="margin:0 0 6px;">Draft audit reports and present engagement results to Engineering and Information Security process owners.</li> <li style="margin:0 0 6px;">Engage directly with technology process owners to validate findings, agree on corrective action plans, and set remediation timelines.</li> <li style="margin:0 0 6px;">Track and follow up on the implementation of IT and cyber audit recommendations for assigned engagements.</li> <li style="margin:0 0 6px;">Contribute to the annual technology and cyber risk assessment for assigned systems and platforms.</li> <li style="margin:0 0 6px;">Coach and provide on-the-job guidance to Senior Auditors, Auditors, and Interns on IT audit techniques.</li> <li style="margin:0 0 6px;">Support the Audit Manager in preparing quarterly and annual IT/cyber audit reporting materials.</li> <li style="margin:0 0 6px;">Stay current on IT auditing standards, cybersecurity frameworks, and SAMA regulatory requirements (including the SAMA Cyber Security Framework).</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Experience and Qualifications</h3> <p style="margin:0 0 12px; </strong>********<strong>;">Candidates should possess <strong style="font-weight:700;">5-10 years of experience</strong> in IT and cybersecurity audit roles. The role requires a strong understanding of audit methodologies and risk management principles, particularly within technology environments.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Skills and Knowledge</h3> <p style="margin:0 0 12px; </strong>********<strong>;">Proficiency in IT general controls, application controls, network and endpoint security, identity and access management, and cloud configurations is essential. The ability to articulate complex technical issues into clear audit findings and recommendations is also required.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Reporting and Collaboration</h3> <p style="margin:0 0 12px; </strong>********<strong>;">This role involves direct engagement with technology process owners and collaboration with the Audit Manager for reporting and strategic planning. The Lead Auditor will also be responsible for guiding junior audit staff.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Application Process</h3> <p style="margin:0 0 12px; </strong>**********;">Qualified candidates are encouraged to apply. Salary details for this position will be discussed during the interview process.</p>

<h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">About the Role</h3> <p style="margin:0 0 12px; **********<strong>;">Tabby is seeking a <strong style="font-weight:700;">Lead Anti-Fraud Officer</strong> to independently manage complex governance, risk, and compliance (GRC) activities. This full-time role requires 2-5 years of experience and involves serving as a subject matter expert in areas such as enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Role Context and Impact</h3> <p style="margin:0 0 12px; </strong>********<strong>;">The Lead Anti-Fraud Officer will produce high-quality GRC deliverables, mentor junior and mid-level team members, and contribute to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms. This position acts as a crucial link between technical execution and program leadership, collaborating with leads, legal, audit, and business stakeholders to ensure mature and effective GRC outcomes aligned with the Saudi Fintech regulatory environment.</p> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Key Duties</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks.</li> <li style="margin:0 0 6px;">Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives.</li> <li style="margin:0 0 6px;">Monitor and proactively track regulatory and legal developments affecting information security, assessing impact and recommending updates to the governance framework.</li> <li style="margin:0 0 6px;">Prepare and review governance documentation, including RACI matrices, security charter updates, and governance committee packs, and present findings to senior stakeholders.</li> <li style="margin:0 0 6px;">Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off.</li> <li style="margin:0 0 6px;">Mentor GR1–GR2 team members on governance documentation quality, regulatory interpretation, and risk assessment methodology.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Core Responsibilities</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organization's risk appetite.</li> <li style="margin:0 0 6px;">Own and maintain the enterprise information security risk register, ensuring accuracy, currency, and appropriate escalation of significant risks.</li> <li style="margin:0 0 6px;">Lead Business Impact Analysis (BIA) processes for critical business functions, coordinating with asset owners, analyzing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning.</li> <li style="margin:0 0 6px;">Design and execute control effectiveness testing programs, producing findings reports with gap analysis and risk-ranked remediation recommendations.</li> <li style="margin:0 0 6px;">Lead third-party information security risk management, designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register.</li> <li style="margin:0 0 6px;">Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Experience Required</h3> <ul style="margin:0 0 12px; padding-inline-start:24px; list-style-type:disc; list-style-position:outside;"> <li style="margin:0 0 6px;">A minimum of 2-5 years of relevant experience in governance, risk, and compliance, specifically within information security or anti-fraud domains.</li> </ul> <h3 style="font-size:18px; font-weight:700; margin:16px 0 8px;">Work Type</h3> <p style="margin:0 0 12px; </strong>**********;">This is a full-time position.</p>

<p>Own the reliability and performance of our production ClickHouse clusters, whether self-hosted on Kubernetes or running on managed ClickHouse services. Design a standard architecture and tooling that let us grow to dozens of multi-node clusters without the operational work growing at the same pace. Manage the whole cluster lifecycle as code: provisioning, configuration, scaling, upgrades, and migrations. Build monitoring and alerting that catch problems before users notice them. Own backups and disaster recovery, and test restores regularly. Keep clusters secure by default. Plan capacity and keep infrastructure costs under control. Be the go-to person on ClickHouse for developers, DevOps engineers, other DBAs, and engineering leadership, from schema design and data ingestion to query performance. Handle routine database requests and automate as many of them as you can. Step in during rare production emergencies, including outside business hours. Afterwards, lead the root-cause analysis on the database side and contribute to the postmortem. Keep documentation and runbooks up to date, and share what you know with the team.</p><p><strong>Desired Candidate Profile</strong></p><h3>What you'll bring</h3><ul><li>Deep, DBA-level knowledge of ClickHouse from running it in production. You should understand how it stores, merges, replicates, and queries data, and be able to explain why a cluster behaves the way it does.</li><li>Strong SQL is part of this, including optimising complex analytical queries and reviewing schema design.</li><li>Ability to design architecture and automation that holds up across dozens of multi-node clusters.</li><li>Experience running a large fleet of databases (dozens or hundreds of instances) is a strong advantage, and the engine does not have to be ClickHouse.</li><li>You have run and maintained stateful workloads on Kubernetes in production, well beyond the initial deployment.</li><li>Production use of a Kubernetes operator to run databases. Any engine counts, for example CloudNativePG, Zalando Postgres Operator, Altinity, or the official ClickHouse operator.</li><li>Experience with version upgrades, backup and restore, and migrating large datasets between clusters or regions with zero or minimal downtime.</li><li>Strong troubleshooting skills across the whole stack, from queries and schema design down to Kubernetes, Linux, storage, and networking.</li><li>A proactive approach to database health. You have built monitoring and alerting with any modern observability stack, and you act on early warning signs before they turn into incidents.</li><li>Database security in practice: encryption in transit and at rest, access control, and secrets management.</li><li>Infrastructure as code with any mainstream tool, plus at least one programming or scripting language for automation.</li><li>You have hands-on experience with cloud infrastructure on any major provider, as opposed to only using a platform that another team runs.</li><li>Clear communication, written and spoken, with engineers and with leadership, whether the subject is architecture, performance, an incident, a risk, or a cost. You should be able to take a problem from investigation to production fix on your own.</li><li>Nice to have: Hands-on work on the source code of a Kubernetes operator for databases, as a developer or contributor.</li><li>Practical use of AI tools for database observability or for automating routine operational tasks.</li><li>A background in highly regulated environments.</li><li>Any Kubernetes or cloud certifications.</li></ul>

<p>As Information Security Engineer , you ll play a key part in monitoring and defending our infrastructure, applications, and cloud environments from cyber threats. You ll lead incident response efforts, develop and tune detection rules, investigate security events, and collaborate with cross-functional teams to strengthen our security posture.</p><h3>Security Monitoring &amp; Detection</h3><p>Monitor and analyze logs and alerts from a wide range of sources including firewalls, intrusion detection/prevention systems (IDS/IPS), endpoints, servers, and cloud platforms. Perform correlation of events from multiple sources to identify advanced threats and unusual patterns of behavior. Fine-tune alert thresholds and detection logic to reduce false positives and improve signal-to-noise ratio. Maintain dashboards and reporting to provide real-time visibility into security posture.</p><h3>Incident Response &amp; Investigation</h3><p>Serve as a frontline responder for security incidents, managing incidents through their lifecycle detection, containment, eradication, recovery, and lessons learned. Coordinate with internal stakeholders and external vendors during high-severity incidents or data breaches. Perform root cause analysis and forensic investigations using endpoint and network-based artifacts. Maintain detailed incident documentation and contribute to post-mortem analysis and reports.</p><h3>Threat Intelligence &amp; Detection Rule Development</h3><p>Research emerging threats and trends. Contribute to the creation and tuning of detection rules, threat-hunting queries, and use cases across multiple platforms including cloud environments. Maintaining CTI Platform along with the integration of the CTI feeds with the security controls to have active CTI driven detections.</p><h3>Collaboration and Communication</h3><p>Communicate effectively with cross-functional teams including IT, DevOps, Risk, and Compliance during incidents and investigations. Provide concise and clear updates during incident handling to stakeholders and management. Mentor junior analysts and assist in training efforts within the SOC team.</p><p><strong>Desired Candidate Profile</strong></p><p>2 3 years of experience in a SOC or cybersecurity operations role, ideally in a fast-paced fintech or enterprise environment. Strong knowledge of security best practices, including incident handling, alert triage, log analysis, and threat modeling. Understanding of online technologies, REST APIs, microservices, and modern application architectures. Experience working in a culturally diverse and collaborative environment. Familiarity with DLP, AV, and anti-malware systems from an operational monitoring perspective. Experience with phishing detection, user behavior analytics, and security awareness campaigns. Security certifications such as Security+, CySA+, eCIR, eCTHPv2, GCIA, or GMON (preferred but not required). Strong communication skills, especially for coordinating incident response and writing clear incident reports. Experience with SIEM platforms , SOAR tools , EDR/XDR , and Threat Intelligence platforms . Familiarity with cloud environments and cloud-native logging and monitoring tools. Scripting experience (e.g., Python ) to automate tasks and improve SOC efficiency.</p>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> As Audit Lead – IT &amp; Cyber Security Audit, you will lead the end-to-end execution<br>of IT, cybersecurity, and technology audit engagements, supervising<br>engagement teams and delivering high-quality audit results in line with Tabby's<br>technology risk-based audit plan.<br> <br> Key Responsibilities<br>&nbsp;● Lead the planning and execution of assigned IT general controls,<br>● application controls, and cybersecurity audit engagements, from<br>scoping through reporting.<br>● Develop detailed audit programs and risk and control matrices (RCMs)<br>covering IT and cyber risk areas, aligned with the approved audit plan.<br>● Supervise and review the fieldwork of Senior Auditors, Auditors, and<br>Interns assigned to the engagement, ensuring quality and adherence to<br>methodology.<br>● Conduct walkthroughs, technical interviews, and testing of IT general<br>controls, application controls, network and endpoint security, identity<br>and access management, and cloud configurations.<br>● Identify control gaps and root causes, and draft clear, actionable audit<br>findings and recommendations on technology and cyber risk.<br>● Draft audit reports and present engagement results to Engineering and<br>Information Security process owners.<br>● Engage directly with technology process owners to validate findings,<br>agree on corrective action plans, and set remediation timelines.<br>● Track and follow up on the implementation of IT and cyber audit<br>recommendations for assigned engagements.<br>● Contribute to the annual technology and cyber risk assessment for<br>assigned systems and platforms.<br>● Coach and provide on-the-job guidance to Senior Auditors, Auditors,<br>and Interns on IT audit techniques.<br>● Support the Audit Manager in preparing quarterly and annual IT/cyber<br>audit reporting materials.<br>● Stay current on IT auditing standards, cybersecurity frameworks, and<br>● SAMA regulatory requirements (including the SAMA Cyber Security<br> <br> Skills, Knowledge and Expertise<br>● 5+ years of experience in IT audit, information security, or technology risk,<br>including experience leading audit engagements, preferably within<br>banking, fintech, or corporate environments.<br>● Strong knowledge of IT auditing standards, cybersecurity frameworks,<br>and SAMA regulatory requirements.<br>● Experience assessing IT general controls, application controls, and<br>cybersecurity controls.<br>● Strong communication and interpersonal skills to engage with<br>technology process owners and present audit findings.<br>● Strong analytical and problem-solving skills with a detail-oriented<br>approach.<br>● Proficiency in IT audit tools and familiarity with cloud platforms<br>(AWS/Azure/GCP).<br>● Bachelor's degree in Computer Science, Information Systems,<br>Cybersecurity, or a related field; CISA (obtained or in progress) highly<br>desirable.<br><br> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5"> Preferred candidate </h2> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Years_of_experience"> <b>Years of experience</b> </div> <div class="col is-9 p5" data-automation-id="data_Years_of_experience"> No experience required </div> </div> <div class="row is-m v-align-top t-small "> <div class="col is-3 p5" data-automation-id="label_Degree"> <b>Degree</b> </div> <div class="col is-9 p5" data-automation-id="data_Degree"> Bachelor's degree / higher diploma </div> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <strong>The Senior Auditor,</strong> reporting to our Head of Audit, who will be responsible for executing internal audit assignments in accordance with the approved audit plan, evaluating internal controls, identifying risks, and supporting compliance efforts across Tabby.<br><br> <br> Key Responsibilities<br>● Execute audit fieldwork independently for assigned sections of financial,<br>operational, and compliance audit engagements.<br>● Perform walkthroughs and design/conduct test procedures to evaluate<br>the design and operating effectiveness of controls.<br>● Prepare working papers and risk and control matrices (RCMs) to a<br>quality standard supporting audit conclusions.<br>● Identify control weaknesses and operational gaps, and draft clear<br>observations and recommendations for review by the Audit Lead.<br>● Lead limited-scope audits or discrete workstreams within larger<br>engagements, under the supervision of an Audit Lead or Audit Manager.<br>● Participate in discussions with process owners to clarify processes,validate findings, and gather supporting evidence.<br>● Assist in tracking the status of agreed corrective actions and follow-up<br>testing.<br>● Mentor and review the work of Auditors and Interns assigned to the same<br>engagement.<br>● Contribute data and analysis to support the annual risk assessment for<br>assigned business areas.<br>● Support advisory reviews of new products, processes, or policy changes<br>from a controls perspective.<br>● Stay current on internal auditing standards and relevant regulatory<br>requirements.<br> <br> Skills, Knowledge and Expertise<br>● 3+ years of experience in internal or external auditing, risk management,<br>or finance, preferably within banking, fintech, or corporate environments.<br>● Good knowledge of auditing standards and internal control concepts<br>(COSO).<br>● Experience performing audit testing across business processes, financial<br>statements, and operational controls.<br>● Good communication skills to engage with process owners and<br>document audit findings clearly.<br>● Strong analytical skills with a detail-oriented approach.<br>● Proficiency in Excel and audit working paper tools.<br>● Bachelor's degree in Accounting, Finance, Business Administration, or a<br>related field; progress toward CIA or CPA is a plus.<br> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5"> Preferred candidate </h2> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Years_of_experience"> <b>Years of experience</b> </div> <div class="col is-9 p5" data-automation-id="data_Years_of_experience"> No experience required </div> </div> <div class="row is-m v-align-top t-small "> <div class="col is-3 p5" data-automation-id="label_Degree"> <b>Degree</b> </div> <div class="col is-9 p5" data-automation-id="data_Degree"> Bachelor's degree / higher diploma </div> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> The Lead Anti-Fraud Officer independently leads complex governance, risk, and compliance activities and serves as a subject matter expert in one or more GRC domains — enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management. The role produces high-quality GRC deliverables, provides technical mentoring to junior and mid-level team members, and contributes directly to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms.&nbsp;<br>The Lead Anti-Fraud Officer operates as a bridge between technical execution and programme leadership — collaborating with leads, legal, audit, and business stakeholders to drive mature and effective GRC outcomes aligned with the Saudi Fintech regulatory environment.<br> <br> Key Responsibilities<br><ul><li>Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks.</li><li>Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives.</li><li>Monitor and proactively track regulatory and legal developments affecting information security — assessing impact and recommending updates to the governance framework.</li><li>Prepare and review governance documentation — RACI matrices, security charter updates, governance committee packs — and present findings to senior stakeholders.</li><li>Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off.</li><li>Mentor GR1–GR2 team members on governance documentation quality, regulatory interpretation, and risk assessment methodology.</li></ul><strong>Enterprise Risk Management</strong><br><ul><li>Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organization's risk appetite.</li><li>Own and maintain the enterprise information security risk register — ensuring accuracy, currency, and appropriate escalation of significant risks.</li><li>Lead BIA processes for critical business functions — coordinating with asset owners, analysing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning.</li><li>Design and execute control effectiveness testing programmes, producing findings reports with gap analysis and risk-ranked remediation recommendations.</li><li>Lead third-party information security risk management — designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register.</li><li>Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption.</li></ul><strong>Compliance Programme Delivery</strong><br><ul><li>Lead compliance monitoring activities for CFFR, NCA ECC, PDPL, ISO 27001, and PCI-DSS — producing gap analyses, treatment plans, and periodic compliance status reports.</li><li>Manage internal and external audit cycles — coordinating evidence collection, reviewing evidence quality, engaging with auditors, and tracking remediation to closure.</li><li>Design and deliver the security awareness programme — producing targeted content for different staff segments, conducting awareness sessions, and analysing effectiveness metrics.</li><li>Develop and maintain GRC programme metrics dashboards, ensuring KPIs and KRIs are accurately measured and presented to senior management on schedule.</li><li>Lead the integration of information security requirements into third-party contracts, procurement processes, and major project onboarding.</li><li>Contribute to the development of the information security programme strategy, identifying capability improvement opportunities and recommending investment priorities to the Lead.</li></ul><strong>Cross-Functional Collaboration &amp; Knowledge Leadership</strong><br><ul><li>Serve as the primary GRC point of contact for assigned business and technology teams — providing expert guidance on security requirements, risk treatment, and compliance obligations.</li><li>Lead information classification and security requirements reviews for significant IT, product, and business projects.</li><li>Contribute to the GRC knowledge base — developing reusable templates, guidance documents, and training materials for internal use.</li><li>Represent the GRC function in cross-functional working groups, project steering committees, and regulatory workstreams.</li><li>Perform additional responsibilities as assigned by management.<br></li></ul> <br> Skills, Knowledge and Expertise<br><ul><li>Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field.</li><li>A Master's degree in Information Security, Risk Management, or Business Administration is an advantage.</li><li>3–5 years of progressive professional experience in information security governance, risk management, or compliance. Demonstrable experience independently leading risk assessment cycles, regulatory compliance programmes, or audit coordination activities.</li><li>&nbsp;In-depth knowledge of the <strong>CFFR framework </strong>is required.&nbsp;</li><li>Experience in a regulated Fintech or banking environment is strongly preferred.</li></ul> <br> Benefits<br><ul><li>We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees.</li><li>Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone.&nbsp;</li><li>You will have an opportunity to learn and grow in one of the fastest growing fintech companies in the region</li><li>We offer you relocation support as well as we guide you through all the process.</li><li>We’ll set you up with the devices required for your work.</li></ul> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5"> Preferred candidate </h2> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Years_of_experience"> <b>Years of experience</b> </div> <div class="col is-9 p5" data-automation-id="data_Years_of_experience"> No experience required </div> </div> <div class="row is-m v-align-top t-small "> <div class="col is-3 p5" data-automation-id="label_Degree"> <b>Degree</b> </div> <div class="col is-9 p5" data-automation-id="data_Degree"> Bachelor's degree / higher diploma </div> </div>

<h2 class="h5">Job description</h2> <div class="t-break" data-jb-field="description"> <br>We're looking for an experienced Portfolio Growth Manager to own the growth and health of Tabby's card program end-to-end.<br><br><br>This role sits at the intersection of scheme relationships, compliance and commercial strategy working closely with Card Scheme, Compliance, Risk and Product to grow card issuance, activation and usage while keeping the program fully aligned with scheme rules and regulatory requirements.<br><br><br>You'll lead portfolio growth initiatives, manage scheme relationships and reporting, and own the compliance obligations tied to the card program — from scheme mandates to regulatory requirements. You're comfortable balancing a commercial growth agenda with the discipline compliance demands.<br><br><br>If you enjoy growing a card program commercially while also being the person who keeps it compliant and audit-ready, this role is for you.<br><br> <br> Key Responsibilities<br><ul><li>Own portfolio growth strategy for Tabby's card program including driving growth across the funnel and identify and execute growth levers pricing, incentives and partnerships.</li><li>Manage day-to-day relationships with card schemes, including program reporting, mandates, incentives and new scheme initiatives.</li><li>Ensure the card program's ongoing compliance with scheme rules, regulatory requirements and internal risk policies.</li><li>Partner with Compliance, Risk and Legal to manage scheme audits, certifications and regulatory filings related to the card program.</li><li>Track and report portfolio performance (activation, spend, retention) and compliance status to internal and external stakeholders.</li><li>Stay ahead of scheme rule changes and regulatory updates, translating them into action plans across the business.</li><li>Collaborate with Product and Engineering to prioritize features that support both growth and compliance goals.<br></li></ul> <br> Skills, Knowledge and Expertise<br><ul><li>3–4 years of experience in banking or fintech, with direct exposure to card programs, scheme management or compliance.</li><li>Working knowledge of card scheme rule and the regulatory requirements governing card programs.</li><li>Strong analytical skills, comfortable working with portfolio performance data to drive growth decisions.</li><li>Excellent stakeholder management skills to work across Compliance, Risk, Marketing, Product &amp; Tech and external scheme partners.</li><li>Strong written and verbal communication skills in English &amp; Arabic a must<br></li></ul> <br> Benefits<br><ul><li>We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees.</li><li>Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone.&nbsp;</li><li>You will have an opportunity to learn and grow in one of the fastest growing fintech companies in the region</li><li>We offer you relocation support as well as we guide you through all the process.</li><li>We’ll set you up with the devices required for your work.</li></ul> </div><h2 data-automation-id="subHeaderPreferredCandidate" class="h5"> Preferred candidate </h2> <div class="row is-m v-align-top t-small bg-mute"> <div class="col is-3 p5" data-automation-id="label_Years_of_experience"> <b>Years of experience</b> </div> <div class="col is-9 p5" data-automation-id="data_Years_of_experience"> 5+ years </div> </div> <div class="row is-m v-align-top t-small "> <div class="col is-3 p5" data-automation-id="label_Degree"> <b>Degree</b> </div> <div class="col is-9 p5" data-automation-id="data_Degree"> Bachelor's degree / higher diploma </div> </div>

<p>The Senior Auditor, reporting to our Head of Audit, who will be responsible for executing internal audit assignments in accordance with the approved audit plan, evaluating internal controls, identifying risks, and supporting compliance efforts across Tabby. Execute audit fieldwork independently for assigned sections of financial, operational, and compliance audit assignments. Perform walkthroughs and design/conduct test procedures to evaluate the design and operating effectiveness of controls. Prepare working papers and risk and control matrices (RCMs) to a quality standard supporting audit conclusions. Identify control weaknesses and operational gaps, and draft clear observations and recommendations for review by the Audit Lead. Lead limited-scope audits or discrete workstreams within larger engagements, under the supervision of an Audit Lead or Audit Manager. Participate in discussions with process owners to clarify processes, validate findings, and gather supporting evidence. Assist in tracking the status of agreed corrective actions and follow-up testing. Mentor and review the work of Auditors and Interns assigned to the same engagement. Contribute data and analysis to support the annual risk assessment for assigned business areas. Support advisory reviews of new products, processes, or policy changes from a controls perspective. Stay current on internal auditing standards and relevant regulatory requirements.</p><p><strong>Desired Candidate Profile</strong></p><p>3+ years of experience in internal or external auditing, risk management, or finance, preferably within banking, fintech, or corporate environments. Good knowledge of auditing standards and internal control concepts (COSO). Experience performing audit testing across business processes, financial statements, and operational controls. Good communication skills to engage with process owners and document audit findings clearly. Strong analytical skills with a detail-oriented approach. Proficiency in Excel and audit working paper tools. Bachelor's degree in Accounting, Finance, Business Administration, or a related field; progress toward CIA or CPA is a plus.</p>

<p>The Lead Anti-Fraud Officer independently leads complex governance, risk, and compliance activities and serves as a subject matter expert in one or more GRC domains enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management. The role produces high-quality GRC deliverables, provides technical mentoring to junior and mid-level team members, and contributes directly to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms. The Lead Anti-Fraud Officer operates as a bridge between technical execution and programme leadership collaborating with leads, legal, audit, and business stakeholders to drive mature and effective GRC outcomes aligned with the Saudi Fintech regulatory environment. Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks. Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives. Monitor and proactively track regulatory and legal developments affecting information security assessing impact and recommending updates to the governance framework. Prepare and review governance documentation RACI matrices, security charter updates, governance committee packs and present findings to senior stakeholders. Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off. Mentor GR1 GR2 team members on governance documentation quality, regulatory interpretation, and risk assessment methodology. Enterprise Risk Management Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organization's risk appetite. Own and maintain the enterprise information security risk register ensuring accuracy, currency, and appropriate escalation of significant risks. Lead BIA processes for critical business functions coordinating with asset owners, analysing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning. Design and execute control effectiveness testing programmes, producing findings reports with gap analysis and risk-ranked remediation recommendations. Lead third-party information security risk management designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register. Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption. Compliance Programme Delivery Lead compliance monitoring activities for CFFR, NCA ECC, PDPL, ISO 27001, and PCI-DSS producing gap analyses, treatment plans, and periodic compliance status reports. Manage internal and external audit cycles coordinating evidence collection, reviewing evidence quality, engaging with auditors, and tracking remediation to closure. Design and deliver the security awareness programme producing targeted content for different staff segments, conducting awareness sessions, and analysing effectiveness metrics. Develop and maintain GRC programme metrics dashboards, ensuring KPIs and KRIs are accurately measured and presented to senior management on schedule. Lead the integration of information security requirements into third-party contracts, procurement processes, and major project onboarding. Contribute to the development of the information security programme strategy, identifying capability improvement opportunities and recommending investment priorities to the Lead. Cross-Functional Collaboration &amp; Knowledge Leadership Serve as the primary GRC point of contact for assigned business and technology teams providing expert guidance on security requirements, risk treatment, and compliance obligations. Lead information classification and security requirements reviews for significant IT, product, and business projects. Contribute to the GRC knowledge base developing reusable templates, guidance documents, and training materials for internal use. Represent the GRC function in cross-functional working groups, project steering committees, and regulatory workstreams. Perform additional responsibilities as assigned by management.</p><p><strong>Desired Candidate Profile</strong></p><p>Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field. A Master's degree in Information Security, Risk Management, or Business Administration is an advantage. 3 5 years of progressive professional experience in information security governance, risk management, or compliance. Demonstrable experience independently leading risk assessment cycles, regulatory compliance programmes, or audit coordination activities. In-depth knowledge of the CFFR framework is required. Experience in a regulated Fintech or banking environment is strongly preferred.</p>

<p>We're looking for an experienced Portfolio Growth Manager to own the growth and health of Tabby's card program end-to-end. This role sits at the intersection of scheme relationships, compliance and commercial strategy working closely with Card Scheme, Compliance, Risk and Product to grow card issuance, activation and usage while keeping the program fully aligned with scheme rules and regulatory requirements. You'll lead portfolio growth initiatives, manage scheme relationships and reporting, and own the compliance obligations tied to the card program from scheme mandates to regulatory requirements. You're comfortable balancing a commercial growth agenda with the discipline compliance demands. If you enjoy growing a card program commercially while also being the person who keeps it compliant and audit-ready, this role is for you. Own portfolio growth strategy for Tabby's card program including driving growth across the funnel and identify and execute growth levers pricing, incentives and partnerships. Manage day-to-day relationships with card schemes, including program reporting, mandates, incentives and new scheme initiatives. Ensure the card program's ongoing compliance with scheme rules, regulatory requirements and internal risk policies. Partner with Compliance, Risk and Legal to manage scheme audits, certifications and regulatory filings related to the card program. Track and report portfolio performance (activation, spend, retention) and compliance status to internal and external stakeholders. Stay ahead of scheme rule changes and regulatory updates, translating them into action plans across the business. Collaborate with Product and Engineering to prioritize features that support both growth and compliance goals.</p><p><strong>Desired Candidate Profile</strong></p><p>3 4 years of experience in banking or fintech, with direct exposure to card programs, scheme management or compliance. Working knowledge of card scheme rule and the regulatory requirements governing card programs. Strong analytical skills, comfortable working with portfolio performance data to drive growth decisions. Excellent stakeholder management skills to work across Compliance, Risk, Marketing, Product &amp; Tech and external scheme partners. Strong written and verbal communication skills in English &amp; Arabic a must</p>