Senior Enterprise Risk Analyst (Business Continuity Management)

Department: Enterprise Risk Location: UAE Description About Us: Tabby is on a mission to give people power over their money. For too long, financial systems have worked for the institutions that built them, not the people using them. Runaway interest, fine print and limited access have left many behind, feeling shut out of a system that wasn't setting them up for success. We're building a different kind of system—in a complete money app to send, spend and save. One that's clear, flexible and puts people and businesses in control. Founded in 2019, we serve customers and businesses across Saudi Arabia, the United Arab Emirates and Kuwait. Millions of customers and 65,000 global brands, government services and small businesses rely on us today. What began as a better way to pay at checkout has grown into a financial system working the way it should have all along. About the Role: The role supports and independently delivers key elements of the business continuity and operational resilience programme across Tabby's UAE entities, helping the business understand which services must keep running, how long they can be disrupted before customers are harmed, and whether the firm could recover within that time. The role works closely with first-line owners across the business and supports the firm's response to regulatory expectations on operational resilience. Key Responsibilities • Support the delivery of the business continuity and operational resilience programme across both UAE entities, in line with Central Bank of the UAE (CBUAE) expectations and the Group risk framework. • Run the business impact analysis cycle with departments — gathering, challenging and consolidating what each team does, what breaks if it stops, and how quickly. • Support the identification of critical operations and the setting of impact tolerances, working with first-line owners and senior management. • Develop and maintain business continuity and recovery plans, dependency mapping and crisis playbooks, keeping them current, practical and usable. • Coordinate and support the exercise and testing programme, including tabletop exercises, and document outcomes, lessons learned and follow-up actions. • Support the maintenance and continuous improvement of business continuity and operational resilience policies, standards and methodologies. • Contribute to resilience reporting for senior management, risk committees and the regulator, including maturity and self-assessment positions. • Support third-party and technology dependency work where it affects the resilience of critical operations. • Provide practical support to first-line owners on business impact analyses, recovery objectives, continuity planning and remediation actions. • Act as a point of contact for internal audit and support regulatory or external reviews relating to business continuity and operational resilience. • Support ERM governance and tooling, including use and administration of GRC tools, maintenance of documentation, committee materials, action trackers and audit-ready evidence. Skills, Knowledge & Expertise • 2–4 years' experience in business continuity, operational resilience, operational risk or a related role within Financial Services, FinTech, Payments or another regulated environment. • Practical working knowledge of business continuity and resilience concepts — business impact analysis, recovery objectives, continuity planning and testing — with the ability to apply them pragmatically. • Awareness of regulatory expectations for operational resilience; familiarity with CBUAE requirements or an equivalent regime is an advantage. • Strong stakeholder engagement skills, with the confidence to run workshops and interviews with department heads and to challenge the answers constructively. • Excellent written and verbal communication skills, including experience preparing clear plans, reports and presentations. Job Benefits • A working environment that gives you autonomy and responsibility from day one. • You should be comfortable with the idea that the quality of your work will influence the shape of your career. • Participation in the company’s employee stock options program. • Health Insurance • Flexi Perks: A monetary benefit that gives you the freedom to use it as you choose—whether for health and well-being, education and professional development or travel needs!

2–4 years' experience in business continuity, operational resilience, operational risk or a related role within Financial Services, FinTech, Payments or another regulated environment. Practical working knowledge of business continuity and resilience concepts — business impact analysis, recovery objectives, continuity planning and testing — with the ability to apply them pragmatically. Awareness of regulatory expectations for operational resilience; familiarity with CBUAE requirements or an equivalent regime is an advantage. Strong stakeholder engagement skills, with the confidence to run workshops and interviews with department heads and to challenge the answers constructively. Excellent written and verbal communication skills, including experience preparing clear plans, reports and presentations.

Support the delivery of the business continuity and operational resilience programme across both UAE entities, in line with Central Bank of the UAE (CBUAE) expectations and the Group risk framework. Run the business impact analysis cycle with departments — gathering, challenging and consolidating what each team does, what breaks if it stops, and how quickly. Support the identification of critical operations and the setting of impact tolerances, working with first-line owners and senior management. Develop and maintain business continuity and recovery plans, dependency mapping and crisis playbooks, keeping them current, practical and usable. Coordinate and support the exercise and testing programme, including tabletop exercises, and document outcomes, lessons learned and follow-up actions. Support the maintenance and continuous improvement of business continuity and operational resilience policies, standards and methodologies. Contribute to resilience reporting for senior management, risk committees and the regulator, including maturity and self-assessment positions. Support third-party and technology dependency work where it affects the resilience of critical operations. Provide practical support to first-line owners on business impact analyses, recovery objectives, continuity planning and remediation actions. Act as a point of contact for internal audit and support regulatory or external reviews relating to business continuity and operational resilience. Support ERM governance and tooling, including use and administration of GRC tools, maintenance of documentation, committee materials, action trackers and audit-ready evidence.