Enterprise Risk Manager

About Us: Tabby is on a mission to give people power over their money. For too long, financial systems have worked for the institutions that built them, not the people using them. Runaway interest, fine print and limited access have left many behind, feeling shut out of a system that wasn't setting them up for success. We're building a different kind of system—in a complete money app to send, spend and save. One that's clear, flexible and puts people and businesses in control. Founded in 2019, we serve customers and businesses across Saudi Arabia, the United Arab Emirates and Kuwait. Millions of customers and 65,000 global brands, government services and small businesses rely on us today. What began as a better way to pay at checkout has grown into a financial system working the way it should have all along. About the Role: The role supports and independently delivers key elements of the Enterprise Risk Management (ERM) framework across business units, providing clear and timely risk insights to senior management, and ensuring risks are identified, assessed, monitored, and escalated in line with the Group’s risk appetite and regulatory expectations, under the direction of the Head of Enterprise Risk. - Support the ongoing monitoring of enterprise risks, working closely with first-line stakeholders and the Head of Enterprise Risk to ensure mitigation strategies are appropriate, timely, and evidence-based. - Prepare and contribute to regular risk reporting, including risk register updates, KRIs, emerging risks, and thematic insights - Support the maintenance and evolution of the Group’s risk appetite framework, including alignment of risks and KRIs to appetite and tolerance thresholds. - Support the implementation and continuous improvement of ERM frameworks, policies, procedures, and methodologies across the organisation. - Conduct and support risk assessments and scenario analyses for new products, material initiatives, strategic changes, and emerging risks, providing actionable recommendations. - Provide support to first-line risk owners on risk identification, assessments, control design, remediation actions, and residual risk positions. - Support the design, implementation, and effectiveness of control frameworks. - Monitor relevant regulatory developments and emerging risks, contributing to enhancements in risk practices where required. - Act as a key point of contact for internal audit and support regulatory or external reviews related to ERM. - Support ERM governance and tooling, including use and administration of GRC tools, maintenance of documentation, committee materials, action trackers, and audit-ready evidence. - 3–5 years’ experience in Enterprise Risk Management, GRC, or a related role within Financial Services, FinTech, Payments, or other regulated environments. - Practical working knowledge of ERM frameworks, risk governance, and control environments, with the ability to apply concepts pragmatically. - Strong stakeholder engagement skills, with the ability to communicate and collaborate effectively across functions. - Excellent written and verbal communication skills, including experience preparing clear risk reports and presentations. - Strong organisational skills with the ability to manage multiple risk activities in parallel; proficiency in PowerPoint and dashboards, with hands-on experience using or supporting GRC tools a strong advantage. - We offer flexible working hours and trust you to work enough hours to do your job well, at times that suit you and your team. - A working environment that gives you autonomy and responsibility from day one. - You should be comfortable with the idea that the quality of your work will influence the shape of your career. - Participation in the company’s employee stock options program. - Health Insurance - Flexi Perks: A monetary benefit that gives you the freedom to use it as you choose—whether for health and well-being, education and professional development or travel needs!

3–5 years’ experience in Enterprise Risk Management, GRC, or a related role within Financial Services, FinTech, Payments, or other regulated environments. Practical working knowledge of ERM frameworks, risk governance, and control environments, with the ability to apply concepts pragmatically. Strong stakeholder engagement skills, with the ability to communicate and collaborate effectively across functions. Excellent written and verbal communication skills, including experience preparing clear risk reports and presentations. Strong organisational skills with the ability to manage multiple risk activities in parallel; proficiency in PowerPoint and dashboards, with hands-on experience using or supporting GRC tools a strong advantage.

Support the ongoing monitoring of enterprise risks, working closely with first-line stakeholders and the Head of Enterprise Risk to ensure mitigation strategies are appropriate, timely, and evidence-based. Prepare and contribute to regular risk reporting, including risk register updates, KRIs, emerging risks, and thematic insights. Support the maintenance and evolution of the Group’s risk appetite framework, including alignment of risks and KRIs to appetite and tolerance thresholds. Support the implementation and continuous improvement of ERM frameworks, policies, procedures, and methodologies across the organisation. Conduct and support risk assessments and scenario analyses for new products, material initiatives, strategic changes, and emerging risks, providing actionable recommendations. Provide support to first-line risk owners on risk identification, assessments, control design, remediation actions, and residual risk positions. Support the design, implementation, and effectiveness of control frameworks. Monitor relevant regulatory developments and emerging risks, contributing to enhancements in risk practices where required. Act as a key point of contact for internal audit and support regulatory or external reviews related to ERM. Support ERM governance and tooling, including use and administration of GRC tools, maintenance of documentation, committee materials, action trackers, and audit-ready evidence.