About this role
About Us: Tabby is on a mission to give people power over their money. For too long, financial systems have worked for the institutions that built them, not the people using them. Runaway interest, fine print and limited access have left many behind, feeling shut out of a system that wasn't setting them up for success. We're building a different kind of system—in a complete money app to send, spend and save. One that's clear, flexible and puts people and businesses in control. Founded in 2019, we serve customers and businesses across Saudi Arabia, the United Arab Emirates and Kuwait. Millions of customers and 65,000 global brands, government services and small businesses rely on us today. What began as a better way to pay at checkout has grown into a financial system working the way it should have all along. About the Role: The role supports and independently delivers key elements of the Enterprise Risk Management (ERM) framework across business units, providing clear and timely risk insights to senior management, and ensuring risks are identified, assessed, monitored, and escalated in line with the Group’s risk appetite and regulatory expectations, under the direction of the Head of Enterprise Risk. Support the ongoing monitoring of enterprise risks, working closely with first-line stakeholders and the Head of Enterprise Risk to ensure mitigation strategies are appropriate, timely, and evidence-based. Prepare and contribute to regular risk reporting, including risk register updates, KRIs, emerging risks, and thematic insights Support the maintenance and evolution of the Group’s risk appetite framework, including alignment of risks and KRIs to appetite and tolerance thresholds. Support the implementation and continuous improvement of ERM frameworks, policies, procedures, and methodologies across the organisation. Conduct and support risk assessments and scenario analyses for new products, material initiatives, strategic changes, and emerging risks, providing actionable recommendations. Provide support to first-line risk owners on risk identification, assessments, control design, remediation actions, and residual risk positions. Support the design, implementation, and effectiveness of control frameworks. Monitor relevant regulatory developments and emerging risks, contributing to enhancements in risk practices where required. Act as a key point of contact for internal audit and support regulatory or external reviews related to ERM. Support ERM governance and tooling, including use and administration of GRC tools, maintenance of documentation, committee materials, action trackers, and audit-ready evidence.