Вакансии

Location: Portugal, Remote/Portugal Workplace: remote Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We’re looking for a Senior Database Administrator to join our Infrastructure team and help build and maintain reliable, high-performance database systems at scale. You’ll work on challenging technical problems, drive improvements in database reliability and performance, and contribute to the infrastructure powering Tabby’s growing business. Key Responsibilities: Design, construct, install, and maintain large relational databases. Maintain the integrity and security of the database, including backups and recovery procedures. Implement and manage disaster recovery and failover systems. Monitor database performance, implement changes, and apply new patches and versions when required. Optimize queries for performance. Collaborate with development teams to optimize database usage. Set up and maintain database replication, clustering, mirroring, and other high availability strategies. Use and understand tools like PgBouncer and modern monitoring systems. Stay up to date with the latest database technologies and best practices. What you’ll bring: Proven hands-on experience with PostgreSQL (required), including setup, replication, upgrades, monitoring, and performance tuning. Ability to write and optimize complex SQL queries. Experience with backup and recovery strategies, including Point-in-Time Recovery (PITR). Strong understanding of database design, documentation, and development best practices. Experience with ClickHouse is a plus. Working knowledge of scripting/programming languages such as Bash, Python, or Go. Experience managing DBaaS solutions on cloud platforms (GCP or AWS is a plus). Experience migrating large databases across cloud platforms. Familiarity with modern DevOps practices, including Kubernetes, Terraform, and Helm. Experience with real-time data streaming technologies such as Debezium or Flink. Relevant certifications or formal training in database management are a plus. Strong problem-solving skills and excellent communication abilities. Professional proficiency in English (B2 level or higher). What we offer: Full-time B2B contract Fully remote setup Up to 20% tax allowance 22 paid leave days annually Stock options (ESOP) in a fast-scaling, pre-IPO company Flexi benefits you can use for wellness, travel, or learning Work alongside a high-performing, international engineering team in a global fintech unicorn Relocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation and legal setup.

Location: Spain, Remote/Spain Workplace: remote Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We’re looking for a Senior Database Administrator to join our Infrastructure team and help build and maintain reliable, high-performance database systems at scale. You’ll work on challenging technical problems, drive improvements in database reliability and performance, and contribute to the infrastructure powering Tabby’s growing business. Key Responsibilities: Design, construct, install, and maintain large relational databases. Maintain the integrity and security of the database, including backups and recovery procedures. Implement and manage disaster recovery and failover systems. Monitor database performance, implement changes, and apply new patches and versions when required. Optimize queries for performance. Collaborate with development teams to optimize database usage. Set up and maintain database replication, clustering, mirroring, and other high availability strategies. Use and understand tools like PgBouncer and modern monitoring systems. Stay up to date with the latest database technologies and best practices. What you’ll bring: Proven hands-on experience with PostgreSQL (required), including setup, replication, upgrades, monitoring, and performance tuning. Ability to write and optimize complex SQL queries. Experience with backup and recovery strategies, including Point-in-Time Recovery (PITR). Strong understanding of database design, documentation, and development best practices. Experience with ClickHouse is a plus. Working knowledge of scripting/programming languages such as Bash, Python, or Go. Experience managing DBaaS solutions on cloud platforms (GCP or AWS is a plus). Experience migrating large databases across cloud platforms. Familiarity with modern DevOps practices, including Kubernetes, Terraform, and Helm. Experience with real-time data streaming technologies such as Debezium or Flink. Relevant certifications or formal training in database management are a plus. Strong problem-solving skills and excellent communication abilities. Professional proficiency in English (B2 level or higher). What we offer: Full-time B2B contract Fully remote setup Up to 20% tax allowance 22 paid leave days annually Stock options (ESOP) in a fast-scaling, pre-IPO company Flexi benefits you can use for wellness, travel, or learning Work alongside a high-performing, international engineering team in a global fintech unicorn Relocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation and legal setup.

Location: Belgrade, Remote/Serbia Workplace: remote Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We’re looking for a Senior Database Administrator to join our Infrastructure team and help build and maintain reliable, high-performance database systems at scale. You’ll work on challenging technical problems, drive improvements in database reliability and performance, and contribute to the infrastructure powering Tabby’s growing business. Key Responsibilities: Design, construct, install, and maintain large relational databases. Maintain the integrity and security of the database, including backups and recovery procedures. Implement and manage disaster recovery and failover systems. Monitor database performance, implement changes, and apply new patches and versions when required. Optimize queries for performance. Collaborate with development teams to optimize database usage. Set up and maintain database replication, clustering, mirroring, and other high availability strategies. Use and understand tools like PgBouncer and modern monitoring systems. Stay up to date with the latest database technologies and best practices. What you’ll bring: Proven hands-on experience with PostgreSQL (required), including setup, replication, upgrades, monitoring, and performance tuning. Ability to write and optimize complex SQL queries. Experience with backup and recovery strategies, including Point-in-Time Recovery (PITR). Strong understanding of database design, documentation, and development best practices. Experience with ClickHouse is a plus. Working knowledge of scripting/programming languages such as Bash, Python, or Go. Experience managing DBaaS solutions on cloud platforms (GCP or AWS is a plus). Experience migrating large databases across cloud platforms. Familiarity with modern DevOps practices, including Kubernetes, Terraform, and Helm. Experience with real-time data streaming technologies such as Debezium or Flink. Relevant certifications or formal training in database management are a plus. Strong problem-solving skills and excellent communication abilities. Professional proficiency in English (B2 level or higher). What we offer: Full-time B2B contract Fully remote setup Up to 20% tax allowance 22 paid leave days annually Stock options (ESOP) in a fast-scaling, pre-IPO company Flexi benefits you can use for wellness, travel, or learning Work alongside a high-performing, international engineering team in a global fintech unicorn Relocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation and legal setup.

Location: Kazakhstan, Remote/Kazakhstan Workplace: remote Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We’re looking for a Senior Database Administrator to join our Infrastructure team and help build and maintain reliable, high-performance database systems at scale. You’ll work on challenging technical problems, drive improvements in database reliability and performance, and contribute to the infrastructure powering Tabby’s growing business. Key Responsibilities: Design, construct, install, and maintain large relational databases. Maintain the integrity and security of the database, including backups and recovery procedures. Implement and manage disaster recovery and failover systems. Monitor database performance, implement changes, and apply new patches and versions when required. Optimize queries for performance. Collaborate with development teams to optimize database usage. Set up and maintain database replication, clustering, mirroring, and other high availability strategies. Use and understand tools like PgBouncer and modern monitoring systems. Stay up to date with the latest database technologies and best practices. What you’ll bring: Proven hands-on experience with PostgreSQL (required), including setup, replication, upgrades, monitoring, and performance tuning. Ability to write and optimize complex SQL queries. Experience with backup and recovery strategies, including Point-in-Time Recovery (PITR). Strong understanding of database design, documentation, and development best practices. Experience with ClickHouse is a plus. Working knowledge of scripting/programming languages such as Bash, Python, or Go. Experience managing DBaaS solutions on cloud platforms (GCP or AWS is a plus). Experience migrating large databases across cloud platforms. Familiarity with modern DevOps practices, including Kubernetes, Terraform, and Helm. Experience with real-time data streaming technologies such as Debezium or Flink. Relevant certifications or formal training in database management are a plus. Strong problem-solving skills and excellent communication abilities. Professional proficiency in English (B2 level or higher). What we offer: Full-time B2B contract Fully remote setup Up to 20% tax allowance 22 paid leave days annually Stock options (ESOP) in a fast-scaling, pre-IPO company Flexi benefits you can use for wellness, travel, or learning Work alongside a high-performing, international engineering team in a global fintech unicorn Relocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation and legal setup.

Location: Kazakhstan, Remote/Kazakhstan Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: Yerevan, Remote/Yerevan Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: Belgrade, Remote/Serbia Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: -, Remote/Uzbekistan Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: Tbilisi, Remote/Tbilisi Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: Belgrade, Remote Workplace: remote Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. About the role We are looking for a Senior Product Manager with a strong business and technical background to join our Statements team in the Core Platform Domain. The team owns the statement and billing engine behind Tabby’s card products. You will be the Billing team’s go-to partner for Tabby Card. You’ll own all billing functionality the card needs, advise on what’s feasible from a platform, financial and compliance perspective, and shape the rules and architecture behind new card products and markets. This is a highly cross-functional role, great for someone who has built or run card billing, card management or ledger platforms and wants to own how a credit product works under the hood. What you will be doing Partner with Tabby Card product teams on all billing functionality and advise on platform, financial and compliance feasibility Own the billing and statements roadmap across existing and next-generation card products Define the core billing mechanics (statement cycles, minimum payment, repayment rules, installment plans and refunds) and shape the underlying data model and architecture with engineering Translate regulatory and accounting requirements into product requirements with Compliance and Finance Align scope and dependencies with adjacent teams: lending, risk, collections, support and finance Prioritize the backlog and support engineering and QA on requirements and edge cases What we are looking for 3+ years in product management with a strong focus on LMS, billing, core banking, lending, or ledger platforms Experience with platform products in a regulated financial environment Upper-Intermediate English or higher Strong at turning complex business and regulatory rules into precise, implementation-ready specs Hands-on with SQL and product architecture: comfortable designing data models, service interactions and API contracts with engineers Active use of AI tools in daily work, such as prototyping, data analysis, spec writing and automating routine tasks Good understanding of API and integration design: REST, gRPC Strong plus Experience in fintech, payments, banking, wallets, cards, or ledger/accounting domains Familiarity with platforms such as Thought Machine, Mambu, Galileo, Marqeta or TSYS Understanding of double-entry accounting and reconciliation What success looks like In this role, success means you can: Turn ambiguous financial or product requirements into clear, scalable platform designs Help teams implement changes safely in critical money movement systems Improve consistency across products by designing reusable CoreBank capabilities Grow from owning requirements into shaping the direction and evolution of the platform Benefits Locations We hire candidates based within four hours of Dubai time , with remote work available in eligible locations. Depending on your circumstances, we can also discuss an individual relocation plan to our hubs in Armenia, Georgia, Serbia, Poland, and Spain. What you can expect Flexible working hours, coordinated with your team and the needs of your role. Autonomy and responsibility from day one. Opportunities to grow through the quality and impact of your work. Participation in our employee stock option program. We’re committed to an inclusive, high-performing workplace where people from different backgrounds have the support to grow and achieve their goals. If this sounds like the right opportunity for you, we’d love to hear from you.

Location: Belgrade, Remote Workplace: remote Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We’re looking for a Senior Database Administrator to join our Infrastructure team and help build and maintain reliable, high-performance database systems at scale. You’ll work on challenging technical problems, drive improvements in database reliability and performance, and contribute to the infrastructure powering Tabby’s growing business. Key Responsibilities: Design, construct, install, and maintain large relational databases. Maintain the integrity and security of the database, including backups and recovery procedures. Implement and manage disaster recovery and failover systems. Monitor database performance, implement changes, and apply new patches and versions when required. Optimize queries for performance. Collaborate with development teams to optimize database usage. Set up and maintain database replication, clustering, mirroring, and other high availability strategies. Use and understand tools like PgBouncer and modern monitoring systems. Stay up to date with the latest database technologies and best practices. What you’ll bring: Proven hands-on experience with PostgreSQL (required), including setup, replication, upgrades, monitoring, and performance tuning. Ability to write and optimize complex SQL queries. Experience with backup and recovery strategies, including Point-in-Time Recovery (PITR). Strong understanding of database design, documentation, and development best practices. Experience with ClickHouse is a plus. Working knowledge of scripting/programming languages such as Bash, Python, or Go. Experience managing DBaaS solutions on cloud platforms (GCP or AWS is a plus). Experience migrating large databases across cloud platforms. Familiarity with modern DevOps practices, including Kubernetes, Terraform, and Helm. Experience with real-time data streaming technologies such as Debezium or Flink. Relevant certifications or formal training in database management are a plus. Strong problem-solving skills and excellent communication abilities. Professional proficiency in English (B2 level or higher). What we offer: Full-time B2B contract Fully remote setup Up to 20% tax allowance 22 paid leave days annually Stock options (ESOP) in a fast-scaling, pre-IPO company Flexi benefits you can use for wellness, travel, or learning Work alongside a high-performing, international engineering team in a global fintech unicorn Relocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation and legal setup.

Location: Belgrade, Remote Workplace: remote Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We’re looking for a Senior Technical Product Manager with a strong system analysis background to join Tabby’s Financial Platform domain. Every product Tabby launches passes through this domain. We define the financial logic behind each product: how it charges, settles, accounts, and reports. We make sure every launch meets regulatory and financial audit requirements, and we turn one-off needs into reusable platform solutions that the rest of the company builds on. This is a cross-functional role spanning product, system design, financial operations, and platform architecture. It suits you if you want to shape how the financial side of every product is designed, and to see those designs through to robust, best-in-class implementation. What you’ll do: Turn business, product, finance, and regulatory needs into clear system requirements and implementation-ready specifications Define how money and financial data flow end to end across products, partners, and internal systems, from transaction to accounting record Contribute to platform architecture and service interaction design across product services and CoreBank components Work with PMs, engineers, Finance, Compliance, and adjacent teams to define scope, dependencies, and delivery phases Identify the services, integrations, and teams affected by each change Shape and prioritize the team backlog with the product lead Support engineering and QA through implementation, covering edge cases, expected behavior, and incident analysis Keep technical and functional documentation current and usable for engineers and business stakeholders alike What you’ll bring: 3+ years as a Technical PM, System Analyst, or Business Analyst Upper-Intermediate English or higher Ability to break down large business processes into clear technical flows Experience with distributed, service-based architectures Solid API and integration design knowledge (REST, SOAP, gRPC) Strong documentation skills: functional specs, sequence diagrams, state models, API contracts, data models Knowledge of UML, BPMN, or similar notations Strong plus: Fintech, payments, banking, wallets, cards, lending, or ledger/accounting experience Hands-on work with financial transactions, reconciliation, or money movement systems Exposure to regulated environments, such as central bank requirements or e-invoicing ERP integration experience (NetSuite or similar) Product mindset and appetite for broader ownership over time What success looks like: Ambiguous financial, product, or regulatory requirements become clear, scalable platform designs Teams ship changes safely in critical money movement systems Reusable platform capabilities improve consistency across products You grow from owning requirements into shaping the direction of the platform What we offer: Full-time B2B contract Up to 20% tax allowance 22 paid leave days annually Stock options (ESOP) in a fast-scaling, pre-IPO company Flexi benefits you can use for wellness, travel, or learning Work alongside a high-performing, international engineering team in a global fintech unicorn Relocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation, and legal setup (if needed).

Location: Dubai, UAE Workplace: onsite About us: Tabby is on a mission to give people power over their money. For too long, financial systems have worked for the institutions that built them, not the people using them. Runaway interest, fine print and limited access have left many behind, feeling shut out of a system that wasn't setting them up for success. We're building a different kind of system—in a complete money app to send, spend and save. One that's clear, flexible and puts people and businesses in control. Founded in 2019, we serve customers and businesses across Saudi Arabia, the United Arab Emirates and Kuwait. Millions of customers and 65,000 global brands, government services and small businesses rely on us today. What began as a better way to pay at checkout has grown into a financial system working the way it should have all along. About the role: The Senior Information Security Specialist (GRC) independently leads complex governance, risk, and compliance activities and serves as a subject matter expert in one or more GRC domains — enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management. The role produces high-quality GRC deliverables, provides technical mentoring to junior and mid-level team members, and contributes directly to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms. The Senior Specialist bridges technical execution and programme leadership, collaborating with leads, legal, audit, and business stakeholders to deliver mature, effective GRC outcomes aligned with the UAE Fintech regulatory environment. Key Responsibilities Information Security Governance Leadership: Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks, ensuring alignment with CSF, NCA ECC, ISO 27001, and PCI-DSS. Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives. Monitor and proactively track regulatory and legal developments affecting information security, assessing impact and recommending updates to the governance framework. Prepare and review governance documentation (RACI matrices, security charter updates, governance committee packs) and present findings to senior stakeholders. Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off. Mentor junior team members on governance documentation quality, regulatory interpretation, and risk assessment methodology. Enterprise Risk Management: Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organisation's risk appetite. Own and maintain the enterprise information security risk register, ensuring accuracy, currency, and appropriate escalation of significant risks. Lead BIA processes for critical business functions, coordinating with asset owners, analysing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning. Design and execute control effectiveness testing programmes, producing findings reports with gap analysis and risk-ranked remediation recommendations. Lead third-party information security risk management, designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register. Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption. Compliance Programme Delivery: Lead compliance monitoring activities for CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS, producing gap analyses, treatment plans, and periodic compliance status reports. Manage internal and external audit cycles, coordinating evidence collection, reviewing evidence quality, engaging with auditors, and tracking remediation to closure. Design and deliver the security awareness programme, producing targeted content for different staff segments, conducting awareness sessions, and analysing effectiveness metrics. Develop and maintain GRC programme metrics dashboards, ensuring KPIs and KRIs are accurately measured and presented to senior management on schedule. Lead the integration of information security requirements into third-party contracts, procurement processes, and major project onboarding. Contribute to the development of the information security programme strategy, identifying capability improvement opportunities and recommending investment priorities to the Lead. Cross-Functional Collaboration & Knowledge Leadership: Serve as the primary GRC point of contact for assigned business and technology teams, providing expert guidance on security requirements, risk treatment, and compliance obligations. Lead information classification and security requirements reviews for significant IT, product, and business projects. Contribute to the GRC knowledge base, developing reusable templates, guidance documents, and training materials for internal use. Represent the GRC function in cross-functional working groups, project steering committees, and regulatory workstreams. Skills, Knowledge and Expertise Education: Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field. A Master's degree in Information Security, Risk Management, or Business Administration is an advantage. Experience: 3+ years of progressive professional experience in information security governance, risk management, or compliance. Demonstrable experience independently leading risk assessment cycles, regulatory compliance programmes, or audit coordination activities. In-depth knowledge of at least two regulatory frameworks applicable to Fintech environments (CSF, NCA ECC, PDPL, ISO 27001, PCI-DSS) is required. Experience in a regulated Fintech or banking environment is strongly preferred. Certifications & Licences: ISO 27001 Lead Implementer (required). CRISC (Certified in Risk and Information Systems Control) or CISM: required or actively working toward. CDPSE (Certified Data Privacy Solutions Engineer) is an advantage for PDPL specialists. Benefits A working environment that gives you autonomy and responsibility from day one. You should be comfortable with the idea that the quality of your work will influence the shape of your career. Participation in the company’s employee stock options program. Health Insurance Flexi Perks: A monetary benefit that gives you the freedom to use it as you choose—whether for health and well-being, education and professional development or travel needs!

Location: Riyadh, KSA Workplace: onsite As the Compliance Officer, you will support the effective implementation and ongoing management of the organization's compliance framework to ensure adherence to SAMA regulatory requirements, applicable laws, and internal policies. You will independently perform compliance monitoring, regulatory analysis, risk assessments, regulatory obligations tracking, and compliance reviews, while providing day-to-day advisory support to business functions. Key Responsibilities Support the implementation and ongoing management of the organization's compliance framework in line with SAMA regulations and applicable regulatory requirements. Monitor SAMA circulars, regulatory updates, guidance, and relevant industry developments and assess their impact on the organization's activities. Conduct regulatory research and analysis and translate applicable requirements into practical compliance actions and internal requirements. Support the development, review, and maintenance of compliance policies, procedures, standards, and controls. Perform compliance monitoring and testing activities to assess adherence to regulatory requirements, policies, procedures, and established controls. Conduct compliance risk assessments and identify potential regulatory risks, control gaps, and areas requiring remediation. Maintain regulatory obligations trackers and monitor the implementation and completion of SAMA regulatory requirements across relevant business functions. Provide day-to-day compliance advisory support to business teams on SAMA regulatory requirements, policies, processes, and operational activities. Review products, services, processes, partnerships, and business initiatives to identify applicable compliance requirements and potential regulatory risks. Support the preparation, review, and submission of regulatory reports and other required regulatory communications. Conduct compliance reviews and assessments relating to potential regulatory breaches, policy violations, and control weaknesses. Document compliance findings, recommendations, and remediation actions and monitor progress against agreed timelines. Support investigations into potential compliance breaches and regulatory issues, escalating material or complex matters to the Compliance Manager. Support regulatory examinations, internal audits, and independent compliance reviews by preparing documentation, coordinating responses, and tracking remediation activities. Maintain accurate and up-to-date compliance registers, records, trackers, and supporting documentation. Prepare compliance reports, monitoring results, regulatory updates, risk assessments, and other materials for management review. Support the development and delivery of compliance training and awareness activities. Work closely with Risk, Legal, Internal Audit, Operations, Information Security, and business teams to strengthen compliance controls and address regulatory requirements. Identify opportunities to improve compliance processes, controls, monitoring activities, and reporting. Escalate material compliance risks, breaches, control deficiencies, and regulatory concerns to the Compliance Lead in a timely manner. Skills, Knowledge and Expertise Bachelor's degree in Law, Finance, Business Administration, Accounting, Risk Management, Compliance, or a related discipline. At least 3 years of experience in Compliance, Regulatory Compliance, Risk Management, Governance, Audit, or a related function, preferably within banking, financial services, fintech, or another regulated environment. Good working knowledge of SAMA regulatory requirements and applicable Saudi financial services regulations. Good understanding of compliance frameworks, SAMA regulatory obligations, compliance monitoring and testing, risk assessments, and internal controls. Experience conducting compliance monitoring, regulatory research, compliance reviews, risk assessments, or related compliance activities. Experience developing, reviewing, and maintaining compliance policies, procedures, and controls. Ability to interpret SAMA regulatory requirements and translate them into practical business requirements and compliance actions. Experience supporting regulatory examinations, internal audits, compliance reviews, investigations, and remediation activities. Strong analytical and problem-solving skills, with the ability to identify regulatory risks and recommend appropriate actions. Strong communication and stakeholder management skills, with the ability to work effectively with business and control functions. Strong attention to detail and ability to maintain accurate compliance documentation and records. Ability to manage multiple priorities and work independently on assigned compliance activities in a fast-paced regulated environment. High level of integrity, professionalism, confidentiality, and sound regulatory judgment. Compliance certification such as CAMS, CCO, or an equivalent certification is preferred. Additional certifications in risk management, governance, financial crime, or regulatory compliance are considered an advantage. Benefits We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees. Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone. You will have an opportunity to learn and grow in one of the fastest growing fintech companies in the region We offer you relocation support as well as we guide you through all the process. We’ll set you up with the devices required for your work.

Location: Riyadh, KSA Workplace: onsite The Lead Anti-Fraud Officer independently leads complex governance, risk, and compliance activities and serves as a subject matter expert in one or more GRC domains — enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management. The role produces high-quality GRC deliverables, provides technical mentoring to junior and mid-level team members, and contributes directly to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms. The Lead Anti-Fraud Officer operates as a bridge between technical execution and programme leadership — collaborating with leads, legal, audit, and business stakeholders to drive mature and effective GRC outcomes aligned with the Saudi Fintech regulatory environment. Key Responsibilities Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks. Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives. Monitor and proactively track regulatory and legal developments affecting information security — assessing impact and recommending updates to the governance framework. Prepare and review governance documentation — RACI matrices, security charter updates, governance committee packs — and present findings to senior stakeholders. Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off. Mentor GR1–GR2 team members on governance documentation quality, regulatory interpretation, and risk assessment methodology. Enterprise Risk Management Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organization's risk appetite. Own and maintain the enterprise information security risk register — ensuring accuracy, currency, and appropriate escalation of significant risks. Lead BIA processes for critical business functions — coordinating with asset owners, analysing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning. Design and execute control effectiveness testing programmes, producing findings reports with gap analysis and risk-ranked remediation recommendations. Lead third-party information security risk management — designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register. Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption. Compliance Programme Delivery Lead compliance monitoring activities for CFFR, NCA ECC, PDPL, ISO 27001, and PCI-DSS — producing gap analyses, treatment plans, and periodic compliance status reports. Manage internal and external audit cycles — coordinating evidence collection, reviewing evidence quality, engaging with auditors, and tracking remediation to closure. Design and deliver the security awareness programme — producing targeted content for different staff segments, conducting awareness sessions, and analysing effectiveness metrics. Develop and maintain GRC programme metrics dashboards, ensuring KPIs and KRIs are accurately measured and presented to senior management on schedule. Lead the integration of information security requirements into third-party contracts, procurement processes, and major project onboarding. Contribute to the development of the information security programme strategy, identifying capability improvement opportunities and recommending investment priorities to the Lead. Cross-Functional Collaboration & Knowledge Leadership Serve as the primary GRC point of contact for assigned business and technology teams — providing expert guidance on security requirements, risk treatment, and compliance obligations. Lead information classification and security requirements reviews for significant IT, product, and business projects. Contribute to the GRC knowledge base — developing reusable templates, guidance documents, and training materials for internal use. Represent the GRC function in cross-functional working groups, project steering committees, and regulatory workstreams. Perform additional responsibilities as assigned by management. Skills, Knowledge and Expertise Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field. A Master's degree in Information Security, Risk Management, or Business Administration is an advantage. 3–5 years of progressive professional experience in information security governance, risk management, or compliance. Demonstrable experience independently leading risk assessment cycles, regulatory compliance programmes, or audit coordination activities. In-depth knowledge of the CFFR framework is required. Experience in a regulated Fintech or banking environment is strongly preferred. Benefits We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees. Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone. You will have an opportunity to learn and grow in one of the fastest growing fintech companies in the region We offer you relocation support as well as we guide you through all the process. We’ll set you up with the devices required for your work.

Location: Dubai, UAE Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Senior Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: Riyadh, KSA Workplace: onsite We're looking for an  Information Security Specialist (GRC) to join Tabby! The successful candidate will independently execute governance, risk, and compliance activities across the Tabby's information security programme. Key Responsibilities Information Security Governance Maintain and update the information security governance framework documentation, policy library, and associated standards and procedures. Draft and revise information security policies, standards, and baselines, ensuring alignment with applicable regulatory requirements and business objectives. Monitor and track changes in legal, regulatory, and contractual requirements affecting information security (SAMA CSF, PDPL, NCA ECC, PCI-DSS), updating the compliance register accordingly. Maintain and update role and responsibility matrices (RACI), information security governance committee documentation, and reporting packs. Coordinate security governance committee meetings — preparing agendas, minutes, and action tracking. Produce internal and external communication materials related to information security governance, policies, and programme updates. Information Risk Management Execute information security risk assessments independently, applying the organization's risk assessment methodology and producing complete risk registers with identified threats, vulnerabilities, likelihood, impact, and treatment plans. Maintain and update the information asset register — tracking asset owners, classifications, and associated risk profiles. Lead business impact assessment (BIA) data collection activities, coordinating with asset owners and business units to capture accurate recovery objectives and criticality ratings. Conduct control effectiveness evaluations for key information security controls, documenting findings and escalating gaps to the Lead for treatment. Coordinate third-party information security risk assessments — preparing assessment questionnaires, reviewing vendor responses, and producing risk summaries. Integrate risk and vulnerability data into procurement reviews, project onboarding, and change management processes. Prepare periodic risk reports for senior review, highlighting emerging risks, significant changes in the risk profile, and the status of risk treatment actions. Compliance & Programme Development Monitor the organization's compliance posture against SAMA CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS — tracking control status, identifying gaps, and coordinating remediation. Coordinate internal and external audit activities — gathering evidence packages, liaising with auditors, tracking findings, and monitoring remediation progress. Support the preparation of regulatory submissions, self-assessments, and compliance attestations required by SAMA, NCA, and PCI Council. Maintain and enhance the security awareness programme — developing training materials, scheduling communications, and tracking completion metrics. Monitor KPIs and KRIs for the information security programme, preparing accurate and timely dashboards for senior management review. Support the integration of information security requirements into procurement, project management, and change control processes. Cross-Functional & General GRC Support Maintain the information security policy, standard, and procedure library — managing version control, review cycles, and distribution. Support information security initiatives across business and technology teams, providing GRC subject matter expertise on projects and change programmes. Conduct information classification reviews and document security requirements for key business and IT projects. Deliver information security awareness sessions and materials to targeted staff groups. Provide analytical support for GRC team reporting, data gathering, and programme tracking activities. Skills, Knowledge and Expertise Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field. 1–3 years of professional experience in information security governance, risk management, compliance, or a closely related field. Hands-on experience with risk assessment execution, policy development, or compliance monitoring is required. Prior exposure to SAMA CSF, ISO 27001, PDPL, or NCA ECC requirements is a strong advantage. Experience in a regulated Fintech or banking environment is preferred. ISO 27001 Foundation or Lead Implementer (preferred). CompTIA Security+ or equivalent. Working toward CRISC (Certified in Risk and Information Systems Control) or CISM. Benefits We are an international team of inspired professionals located all over the globe. We  have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees. Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone. You will have an opportunity to learn and grow in one of the fastest growing fin tech companies in the region We offer you relocation support as well as we guide you through all the process. We’ll set you up with the devices required for your work.

Location: Kuwait City, Kuwait Workplace: onsite About Tabby: Tabby is the GCC's leading shopping and payments platform, giving millions of people across Saudi Arabia and the UAE more control in the way they spend, save and earn. Headquartered in Riyadh, we've grown into one of the largest fintech companies to come out of the Arab world, working with +65,000 sellers, from global names like Apple, IKEA, Adidas and Shein to the region's leading retail groups. We're now building a local team on the ground in Kuwait, with a renewed presence in the market coming soon. This is a rare chance to join us at the start of a local launch, shaping how we show up for Kuwaiti shoppers and sellers from day one, backed by the scale, technology and track record we've built across the region. If you want to help us build something significant in Kuwait, backed by proven regional success, we want to hear from you. About the role Tabby is the leading shopping and financial services app in the Middle East - 25M+ users, 65,000+ merchants across Saudi Arabia, the UAE and Kuwait. We're now building our Kuwait team. This is a founding role. You'll support building the compliance function in Kiwait rather than inherit one, and act as our principal contact with the Central Bank of Kuwait. Key Responsibilities Own the CBK relationship - correspondence, inspections, information requests and supervisory dialogue Lead the compliance workstream of our CBK registration and licensing programme Build the Kuwait compliance framework from scratch: policies, controls, monitoring plan and risk assessments Act as MLRO - own the AML/CFT programme, including STR filing, CDD, sanctions screening and transaction monitoring Maintain the BNPL consumer protection framework covering dispute resolution, fee transparency and complaint handling Track regulatory change, assess business impact and drive implementation with the relevant owners Prepare compliance reporting for CBK and papers for the audit and risk committees Conduct regular compliance assessments and audits, proactively identifying potential areas of non-compliance and recommending corrective actions to mitigate risks and ensure adherence to regulatory standards. Provide strategic guidance and support to various departments within the organization on compliance-related matters, including regulatory changes and updates, ensuring that all business activities are conducted in a compliant manner. Design and roll out efficient and effective compliance processes, leveraging technology and innovative solutions to streamline compliance workflows and enhance operational efficiency. Collaborate with internal stakeholders, including senior management, to integrate compliance considerations into all aspects of business operations, including product development, marketing, and customer service. Skills, Knowledge and Expertise 5+ years in compliance, AML/CFT or regulatory advisory within a CBK-regulated business - a Kuwaiti bank, finance company, exchange house, or registered e-payment or e-money provider Direct experience dealing with the CBK , including inspections and regulatory submissions Working knowledge of the CBK e-payment of funds regime and Kuwait's AML/CFT framework A track record of building frameworks, not only administering them Professional Arabic and English, including drafting regulatory correspondence in Arabic