About the Role
About Us:
Tabby is on a mission to give people power over their money. For too long, financial systems have worked for the institutions that built them, not the people using them. Runaway interest, fine print and limited access have left many behind, feeling shut out of a system that wasn't setting them up for success.
We're building a different kind of system—in a complete money app to send, spend and save. One that's clear, flexible and puts people and businesses in control. Founded in 2019, we serve customers and businesses across Saudi Arabia, the United Arab Emirates and Kuwait. Millions of customers and 65,000 global brands, government services and small businesses rely on us today.
What began as a better way to pay at checkout has grown into a financial system working the way it should have all along.
About the Role:
The role supports the Enterprise Risk Management (ERM) function by keeping its core processes running to a reliable cycle — risk and incident records, policy administration, new product approval coordination and the reporting calendar — so that the risk information reaching senior management and committees is complete, accurate and on time. The role works closely with the ERM Manager and first-line stakeholders across the business.
Key Responsibilities
- Support the quarterly risk reporting cycle, including collection and validation of metrics, pack production and committee materials.
- Maintain risk registers, incident records and action trackers, ensuring entries are complete, current and supported by evidence.
- Administer the policy programme — tracking review and approval status, formatting, version control and the governance calendar.
- Support the risk and control self-assessment cycle — scheduling checks, chasing evidence, and populating workpapers and trackers.
- Support the maintenance of the risk appetite framework and key risk indicators, including data sourcing and validation with metric owners.
- Support ERM training and awareness activity, including delivery logistics, materials and completion records.
- Work closely with first-line stakeholders to collect, chase and quality-check risk information, escalating gaps and delays promptly.
- Support internal audit and regulatory requests by preparing documentation and audit-ready evidence.
- Support ERM governance and tooling, including use and administration of GRC tools and maintenance of documentation.
Skills, Knowledge & Expertise
- 2–4 years' experience in risk, GRC, compliance, audit support or a related operational role within Financial Services, FinTech, Payments or another regulated environment.
- Working knowledge of risk registers, risk reporting and control documentation, with the ability to apply concepts pragmatically.
- Strong organisational skills and attention to detail, with the ability to run several recurring cycles in parallel and keep each to deadline.
- Confident coordinating across functions and seniority levels, including remotely, and comfortable chasing stakeholders for information.
- Excellent written and verbal communication skills in English, including experience preparing clear risk reports and presentations.
- Proficiency in Excel and PowerPoint; hands-on experience using or supporting GRC tools a strong advantage.
Job Benefits
- 2–4 years' experience in business continuity, operational resilience, operational risk or a related role within Financial Services, FinTech, Payments or another regulated environment.
- Practical working knowledge of business continuity and resilience concepts — business impact analysis, recovery objectives, continuity planning and testing — with the ability to apply them pragmatically.
- Awareness of regulatory expectations for operational resilience; familiarity with CBUAE requirements or an equivalent regime is an advantage.
- Strong stakeholder engagement skills, with the confidence to run workshops and interviews with department heads and to challenge the answers constructively.
- Excellent written and verbal communication skills, including experience preparing clear plans, reports and presentations.