Senior GRC & Compliance Lead — Risk, Policy & Security

Tabby | تابي; Riyadh; On-site; SAR 240,000 - 360,000; Full time

Benefits offered by this job

Relocation support

Employee stock options

Devices provided

Job summary

Tabby, a leading fintech in the KSA, seeks a Lead Anti-Fraud Officer to independently lead governance, risk and compliance activities and to serve as a subject matter expert in GRC domains across enterprise information security governance, risk management frameworks, regulatory compliance, or third‑party risk management. The role mentors junior staff and contributes to ongoing improvements of the GRC framework.

Department: Risk B2C. Location: KSA.

Qualifications

• Bachelor's degree in information technology, computer science, software engineering, cybersecurity or risk management is required.
• Experience leading risk assessment cycles, regulatory compliance programmes or audit coordination.
• In‑depth knowledge of the CFFR framework is required.
• Experience in a regulated fintech or banking environment is strongly preferred.

Responsibilities

• Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks.
• Serve as SME for regulatory domains, translating requirements into implementable control objectives.
• Monitor regulatory and legal developments and update the governance framework accordingly.
• Prepare and review governance documentation and present findings to senior stakeholders.
• Lead regulatory self-assessments and compliance attestations with evidence gathering and sign‑off.

Skills

GRC governance

Regulatory compliance

Risk management

Third‑party risk management

Education

Bachelor's degree in IT/CS/Software Engineering/Cybersecurity/Risk Management

Master's degree in Information Security/Risk Management/BA

Job description

Tabby, a leading fintech in the KSA, seeks a Lead Anti-Fraud Officer to independently lead governance, risk and compliance activities and to serve as a subject matter expert in GRC domains across enterprise information security governance, risk management frameworks, regulatory compliance, or third‑party risk management. The role mentors junior staff and contributes to ongoing improvements of the GRC framework.

Department: Risk B2C. Location: KSA.