Senior GRC & InfoSec Lead (Fintech, KSA)

تابي; Saudi Arabia; On-site; SAR 150,000 - 210,000; Full time

Benefits offered by this job

Relocation support

Employee stock options

Devices provided

Career growth opportunities

Job summary

Tabby seeks a Lead Anti-Fraud Officer to independently lead governance, risk and compliance activities across GRC domains within a Saudi fintech context. You will mentor staff and drive improvements to the GRC framework, risk treatment processes, and compliance reporting.

The role bridges technical execution with programme leadership, collaborating with legal, audit and business stakeholders to ensure mature GRC outcomes aligned with Saudi regulations.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field.
• A Master's degree in Information Security, Risk Management, or Business Administration is an advantage.
• 3–5 years of progressive professional experience in information security governance, risk management, or compliance.
• Demonstrable experience independently leading risk assessment cycles, regulatory compliance programmes, or audit coordination activities.

Responsibilities

• Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks.
• Serve as the SME for assigned regulatory domains, translating requirements into implementable controls.
• Monitor regulatory and legal developments affecting information security and update governance accordingly.
• Prepare governance documentation and present findings to senior stakeholders.
• Lead regulatory self‑assessments and compliance attestations with evidence gathering and quality reviews.
• Mentor junior team members on governance documentation, regulatory interpretation, and risk assessment methodology.
• Lead enterprise information security risk assessments and maintain the risk register.
• Coordinate BIA processes and support Business Continuity/Disaster Recovery planning.
• Design and run control effectiveness testing and produce remedial recommendations.
• Lead third‑party information security risk management and vendor reviews.
• Produce executive risk reports with trend analysis for senior management.

Skills

Governance

Risk management

Compliance

Information security

Regulatory knowledge

Education

Bachelor's degree in IT/CS/Cybersecurity

Master's degree (advantage)

Job description

Tabby seeks a Lead Anti-Fraud Officer to independently lead governance, risk and compliance activities across GRC domains within a Saudi fintech context. You will mentor staff and drive improvements to the GRC framework, risk treatment processes, and compliance reporting.

The role bridges technical execution with programme leadership, collaborating with legal, audit and business stakeholders to ensure mature GRC outcomes aligned with Saudi regulations.