Вакансии

Location: Gurugram, Haryana, India NEOLYTIX Senior Manager, AR RCM Operations  |  Accounts Receivable  |  Gurugram DEPARTMENT Operations, RCM EXPERIENCE 15+ Years LOCATION Gurugram (Onsite) SHIFT US Shift REPORTS INTO CEO & COO ⚠  US Shift: This role operates on a US-aligned shift, onsite at our Gurugram delivery centre. Consistent availability during US business hours is non-negotiable. Apply only if you can commit to this fully. ⚠  Non-Negotiable: A minimum of 15 years of hands-on US healthcare AR and RCM experience is required. Profiles without this depth of domain experience will not be considered regardless of seniority or education. About the Role Neolytix is a US-headquartered healthcare managed services organization serving 270+ provider organizations across the United States, with delivery operations in Gurugram, Manila, and Chicago. Our RCM practice runs medical coding, charge entry, payment posting, and AR and denials management for physician groups and health systems across multiple specialties and payer environments. The Senior Manager, AR RCM is the most senior AR delivery leader in the India operations. Reporting directly to the CEO and COO, this role carries full accountability for AR performance across the Neolytix client portfolio: net collection rates, AR aging, denial resolution, follow-up compliance, and the teams that execute this work every day. This is not a monitoring role and not a reporting role. You own the outcome. If AR aging is trending in the wrong direction, you know why before leadership asks. If a client's net collection rate is below benchmark, you have a recovery plan before the QBR. You lead a multi-tier AR team, hold SLAs before they breach, and bring strategic clarity to the CEO and COO on the financial health of every account. If that describes the way you have built your career, this role is built for you. Key Responsibilities 1. AR Delivery Ownership & SLA Accountability Own end-to-end AR performance across the full Neolytix client portfolio: follow-up compliance, AR aging distribution, denial resolution timelines, and net collection rates. Define and enforce SLA commitments by account: touch cadences, AR aging thresholds, payer follow-up windows, and escalation timelines. Drive the operating cadence: daily floor reviews, weekly performance dashboards, and monthly executive reporting to the CEO and COO. Serve as the senior escalation authority for all AR delivery issues, with direct accountability for resolution and root-cause documentation. 2. Revenue & Financial Performance Own the financial metrics that matter: net collection rate, AR aging distribution (including AR >90), first-pass yield, denial rate, cost to collect, and payment variance. Identify revenue optimization opportunities within the existing portfolio: payer mix trends, underpayment patterns, denial root causes, and write-off risk. Present financial performance analysis and recovery plans to the CEO and COO with clarity and conviction. You do not describe the chart; you explain what it means and what you are doing about it. 3. Denial Management & Payer Strategy Own the denial management function end to end: root cause categorization, appeal workflows, payer-specific escalation protocols, and first-pass improvement plans. Stay current on payer policy changes, CMS billing updates, and coding guideline shifts that affect denial rates and collection timelines. Develop payer-specific follow-up strategies and embed them into team workflows and SOPs. 4. Team Leadership & Talent Development Lead a multi-tier AR team: Team Leads, Senior Associates, and Associates across the AR and denials function. Own performance management, succession planning, and high-potential identification for the AR org. Partner with Talent Management on hiring, onboarding, and retention of AR talent, including calibrating role requirements for the team as it scales. Build a performance culture grounded in accountability, data fluency, and continuous improvement. 5. Client Engagement & Retention Act as the senior operational partner for strategic AR accounts, maintaining relationships at the decision-maker level. Lead and contribute to Quarterly Business Reviews, performance reporting, and service expansion conversations. Surface delivery risks proactively and communicate resolution plans to clients before issues escalate. 6. Process Excellence & Compliance Own SOPs for all AR workflows: initial follow-up, denial management, appeals, escalation, and write-off protocols. Ensure operations remain compliant with HIPAA, CMS billing requirements, and payer-specific compliance standards. Drive continuous improvement across AR workflows using structured problem-solving and root-cause analysis. What You Bring Must-Have 15 or more years of US healthcare AR and RCM experience, with senior leadership accountability over large multi-specialty AR portfolios. Mastery of AR financial metrics: net collection rate, AR aging distribution, denial rate, first-pass yield, cost to collect. You can explain what moves each one and defend your analysis when challenged. Deep denial management expertise: root cause categorization, payer-specific appeal strategies, and a track record of improving first-pass rates. Experience leading multi-tier AR teams of 50 or more FTEs, including Team Leads and supervisors. Commercial payer experience across BCBS, Aetna, Cigna, UHC, and regional payers, alongside Medicare and Medicaid. Multi-specialty billing exposure: physician groups, hospital systems, or both. Excellent client-facing communication: comfortable presenting to C-suite clients and internal senior leadership with equal confidence. Commitment to the US shift, onsite in Gurugram. Strong Preference Prior experience in a BPO, MSO, or KPO environment delivering AR services for US healthcare clients, not in-house captive only. Exposure to multiple billing and EHR platforms: AdvancedMD, Athenahealth, Epic, Kareo, Centricity, or similar. Track record of building or restructuring an AR team and improving performance metrics within 12 months. Power BI or advanced Excel for AR performance tracking and executive reporting. Nice-to-Have MBA or postgraduate degree in healthcare administration, business, or a related discipline. Six Sigma Green Belt or equivalent process improvement methodology applied to an AR workflow. CPAT (Certified Patient Account Technician) or equivalent AR or RCM certification. Experience across multi-geography delivery: India and Philippines operating in parallel. Who You Are You treat AR aging as a story, not a spreadsheet. You know what each band means for revenue risk and you communicate it that way to leadership. You hold SLAs before clients ask about them. Reactive escalation management is not something you do. You can tell the CEO what a number means, not just what it is. Your analysis ends with a so-what and a plan, not a chart. You hold your team to a high standard without losing them. Accountability and development are not in tension in the way you lead. You see denial patterns before they become denial trends. Root cause is where you start, not where you finish. Eligibility Criteria Education: Graduate degree mandatory. Postgraduate degree (MBA or equivalent) preferred. Experience: 15 or more years in US healthcare AR and RCM. Non-negotiable. Communication: Excellent spoken and written English. You will present to the CEO and COO regularly and manage senior client relationships. Communication below this standard will not progress. Shift: US-aligned shift, onsite in Gurugram. This is firm. Apply only if you can commit to this consistently. Notice Period: 30 to 45 days preferred. Up to 60 days considered for the right profile. Performance Expectations (KPIs) In the first 12 months: Net collection rate: sustained at or above agreed client benchmarks across the managed portfolio. AR >90 days: percentage trending down or held within client SLA thresholds. Denial rate and first-pass yield: measurable improvement within 90 days on priority accounts. SLA achievement: 95% or above on committed follow-up and resolution timelines across the portfolio. Client retention: no unplanned exits attributable to AR delivery performance. Team performance: productivity and quality metrics for the AR team within benchmark, with clear improvement plans for underperforming sub-teams. Executive reporting: weekly and monthly dashboards delivered accurately and on time, with actionable narratives, no follow-up questions from the COO needed. Hiring Process Stage 1: Talent Management screening and profile review. AR domain depth and tenure verified at this stage. Stage 2: Functional interview with the COO covering AR delivery depth, financial metric fluency, denial management approach, and team leadership track record. Stage 3: Conversation with the CEO covering strategic fit, client philosophy, and leadership approach. Stage 4: Reference checks and offer. Why Join Neolytix Senior Leadership, Real Scope Own AR delivery for 270+ US provider organizations. This is not a slice of a portfolio. It is the entire function, reporting directly to the CEO and COO. Strategic Visibility Direct access to and regular engagement with senior leadership. Your analysis and judgment directly inform how the business runs and grows. Build, Not Just Run Significant opportunity to shape how the AR function scales: team structure, process standards, tooling, and performance frameworks. Competitive Package Compensation benchmarked to senior RCM leadership in Delhi NCR, with performance-linked incentives tied to portfolio outcomes.

Location: Gurugram, Haryana, India NEOLYTIX Associate Director - RCM RCM  |  Credentialing  |  India Delivery Leadership DEPARTMENT Operations EXPERIENCE 16–20 Years LOCATION Gurugram (Onsite) REPORTS INTO CEO & COO About the Role The Associate Director, RCM Operations is Neolytix's senior-most delivery leader in India, accountable for the end-to-end performance of our RCM and Credentialing service lines. This is not a monitoring role. The AD owns the outcome: SLAs, quality, client satisfaction, team capability, and the P&L that sits behind every engagement. Reporting to the COO and CEO, this seat carries direct authority over Operations Managers, Team Leads, and front-line specialists across both service lines. You will be the primary escalation authority for all delivery issues, the senior client-facing voice for operational matters, and the architect of how Neolytix's India delivery function scales. If you have spent your career running large healthcare operations at a high standard, know what great RCM and Credentialing delivery looks like from the floor up, and are ready to own both the number and the team, this is the role. Key Responsibilities 1. Delivery & SLA Ownership Own end-to-end SLA performance across RCM sub-functions: AR follow-up, billing, payment posting, charge posting, and denial management. Own Credentialing operations in full: provider enrollment, re-credentialing, CAQH maintenance, expirable tracking, and payer-specific workflows. Drive the operating cadence: daily floor reviews, weekly performance dashboards, monthly COO reporting, and escalation resolution. Serve as the senior escalation authority for all delivery issues across both service lines, with direct accountability for resolution timelines. 2. Capacity Planning & P&L Own the India delivery P&L for RCM and Credentialing, managing cost-to-serve, billing realization, and margin targets. Lead headcount planning, capacity modeling, and resource allocation aligned to client volume commitments and pipeline. Partner with the COO on ramp-up plans for new client onboardings, covering hiring, training, and floor-readiness timelines. 3. Client Engagement & Retention Act as the senior operational partner for key clients, building trusted and long-term relationships with client-side stakeholders. Lead and contribute to Quarterly Business Reviews, performance reporting, and service expansion discussions. Proactively surface delivery risks, drive resolution, and communicate transparently with client stakeholders before issues escalate. 4. People Leadership & Talent Development Lead, coach, and develop a multi-tier team: Operations Managers, Team Leads, and front-line specialists across RCM and Credentialing. Own succession planning, performance management cycles, and high-potential identification for the ops org. Partner with Talent Management on hiring, onboarding, and retention strategies for RCM and Credentialing talent. Build a performance culture grounded in accountability, continuous feedback, and professional growth. 5. Process Excellence & Technology Drive continuous improvement across both service lines using structured problem-solving approaches. Champion automation and technology adoption to improve throughput, reduce error rates, and lower cost-to-serve. Own SOPs, process documentation, and audit readiness across RCM and Credentialing workflows. Collaborate with analytics and technology teams to build performance visibility and reporting infrastructure. 6. Governance & Compliance Ensure all operations remain compliant with HIPAA, CMS guidelines, and payer-specific requirements. Own internal QA frameworks, audit processes, and remediation planning for both service lines. Maintain documentation standards and escalation protocols that support SSAE-18 and SOC 2 readiness. What You Bring Must-Have Full-time MBA / PGDM or equivalent postgraduate degree. 16 to 20 years in US healthcare revenue cycle management, with at least 5 years in a senior leadership role heading multi-functional delivery teams of 100+ FTEs. Demonstrated experience leading Credentialing operations at scale: provider enrollment, re-credentialing, CAQH, and payer contracting workflows. Strong command of RCM workflows across the full cycle: AR follow-up, billing, payment posting, charge posting, and denial management. Prior experience in a BPO, MSO, or KPO environment serving US healthcare providers. Proven P&L ownership: cost-to-serve management, headcount planning, and capacity modeling in a delivery environment. Ability to build and read operational dashboards, interpret KPIs, and drive decisions from data. Excellent communication with the ability to engage C-suite clients and internal leadership with equal fluency. Strong Preference Experience managing multi-geography delivery operations spanning India and Philippines. Familiarity with PM and EHR platforms: AdvancedMD, Athenahealth, Kareo, Epic, or Centricity. Track record of leading go-live transitions and new client onboarding at scale. Nice-to-Have Six Sigma or Lean certification. Exposure to AI-assisted workflows or automation tools within RCM environments. Experience in SSAE-18 / SOC 2 compliance environments. Eligibility Criteria Education: Full-time Postgraduate degree (MBA / PGDM or equivalent) mandatory. Part-time, correspondence, or distance-learning qualifications are not accepted. Communication: Excellent spoken and written English. Confident in client-facing calls, COO-level reporting, and written communication with US-based stakeholders. Work Mode: Onsite, Gurugram, 5 days a week. This is a floor-level leadership role; physical presence is required. Notice Period: Candidates available within 30 to 45 days preferred. Extensions considered for the right profile. Performance Expectations (KPIs) The AD, Operations will be measured on the following within the first 12 months: SLA achievement rate across RCM and Credentialing: 95%+ sustained over rolling 90 days. Net collection rate and AR days for RCM accounts under management, trending toward agreed benchmarks. Credentialing cycle time: first-pass provider enrollment within payer-committed timelines, zero expirable lapses. Client retention and satisfaction: no unplanned exits attributable to delivery performance. Team attrition (operations): managed within business continuity thresholds. Delivery margin: cost-to-serve within budget and P&L targets for both service lines. Audit and QA coverage: internal quality audits completed on schedule with remediation tracked to closure. Hiring Process Stage 1: Talent Management screening and profile review. Stage 2: Functional interview with COO covering delivery depth, P&L accountability, multi-LOB scope, and leadership approach. Stage 3: Leadership interview with CEO covering strategic fit, client philosophy, and team-building track record. Stage 4: Reference checks and offer. Why Join Neolytix High-Trust Ownership Own the full delivery function with direct access to the COO and CEO. No layers between your decisions and their impact. Scale & Scope Lead delivery across RCM and Credentialing for 270+ US provider organizations across hospital systems, group practices, and specialty clinics. Build What You Run Greenfield opportunity to standardize, automate, and shape how operations scales at Neolytix, including technology adoption and team structure. Competitive Package Compensation benchmarked to senior ops leadership in Delhi NCR, with performance incentives linked to delivery outcomes and margin targets.

Location: Gurugram, Haryana, India NEOLYTIX Management Trainee, RCM Revenue Cycle Management  |  Full-Time Opportunity  |  Gurugram DEPARTMENT Revenue Cycle Management LOCATION Gurugram (Onsite) SHIFT US Shift (5:00 PM–2:00 AM IST) ⚠  US Shift: This role operates on a US-aligned schedule, 5:00 PM to 2:00 AM IST, 5 days a week, onsite at our Gurugram office. Please apply only if you can fully commit to this schedule. ⚠  Eligibility Gate: Open to 2025 and 2026 graduates. Candidates who completed graduation in 2024 may apply and will be considered on a case-by-case basis, subject to approval. Candidates currently pursuing their degree or who graduated before 2024 are not eligible. The 6-Month Learning Journey Joining Neolytix as a Management Trainee, RCM is a full-time opportunity that begins with a structured 6-month learning journey. You are not thrown on the floor from day one. You will be trained, assessed, and made ready for live operations before you independently handle client work. Every stage of the journey is designed to build your skills progressively. Phase 1 Classroom Training 8 to 12 Days (Max 14) Structured instructor-led sessions covering US healthcare, medical billing, coding basics, and RCM workflows. Your LOB is decided within the first 2 to 3 days based on your performance, knowledge check, and operations team input. Phase 2 Operations Readiness Training 8 to 12 Days You move to the floor alongside senior team members and trainers. You apply classroom learning in a supervised, live operations environment with ongoing assessments. Phase 3 Production Ramp-Up 4 Weeks You begin handling real client work under close supervision. Accuracy, speed, and process adherence are tracked. Performance here determines your readiness to go live independently. Phase 4 Go Live Full Production You are cleared for independent production on your assigned LOB. This marks your transition from trainee to fully operational team member. Throughout the 6 months, there will be several assessments to evaluate your skill development. Your training path and LOB may be refined based on these assessment outcomes. Career Path Neolytix promotes from within. Here is where this journey takes you: Management Trainee Associate 1 Associate 2 Senior Associate 1 QA / SME About the Role Neolytix is a US-headquartered healthcare managed services organization serving 270+ provider organizations across the United States. We are building our next generation of RCM professionals through this full-time opportunity and we are looking for fresh graduates who are motivated, disciplined, and ready to build a real career in US healthcare operations. Revenue Cycle Management is how US healthcare providers get paid for the services they deliver. As a Management Trainee, you will be assessed, trained, and placed into one of three core RCM functional areas based on your skills and performance during the first days of training. Your LOB is not a default assignment. It is matched to where you will thrive. The Three RCM Areas Charge Posting & Payment Posting Translating patient services into medical billing codes and submitting claims to insurers, plus recording and reconciling payments received. Requires speed, accuracy, and coding discipline. Accounts Receivable (AR) Following up on submitted claims, resolving denials, and ensuring payments are collected from insurance payers. Requires analytical thinking, persistence, and clear communication. Credentialing Enrolling healthcare providers with insurance payers so they can legally bill for services. Covers CAQH, PECOS, payer portals, expirables, and compliance. Requires strong process discipline and attention to deadlines. Your LOB assignment is made within the first 2 to 3 days of classroom training, based on your knowledge check scores and the evaluation of the operations team. Once assigned, your entire training is aligned to that LOB. Key Responsibilities Attend and complete all classroom training modules within the defined timeline, meeting assessment benchmarks at each stage. Commit to the LOB assigned to you and engage fully in the training path designed for that functional area. Apply classroom learning during operations readiness training under the supervision of senior team members and trainers. Meet accuracy and productivity benchmarks during the 4-week production ramp-up before going live independently. Support team leads and senior specialists in achieving client SLAs and compliance targets once on the floor. Continuously learn and adapt to US payer requirements, billing rules, and client-specific workflows. Demonstrate consistent progress through assessments to qualify for transition to Associate 1. What You Bring Must-Have Bachelor's degree in any discipline, fully completed. Candidates currently pursuing a degree or with an incomplete graduation are not eligible. Graduated in 2025 or 2026. Candidates from 2024 will be considered on an exceptional basis only. Minimum 70% aggregate in 12th grade (CBSE, ICSE, or equivalent board). Minimum 70% aggregate in graduation. Excellent spoken and written English. You will be trained on and operate in live US healthcare processes. Basic proficiency in MS Excel and MS Word. Full commitment to the US shift: 5:00 PM to 2:00 AM IST, onsite in Gurugram, 5 days a week. Preferred Schooling from Delhi NCR or Tier 1 or Tier 2 cosmopolitan cities. Science or Commerce with Mathematics background (B.Sc, BCA, BBA, B.Com, or similar). Any internship or prior exposure to US healthcare, medical billing, or BPO operations. Eligibility Criteria Education: Bachelor's degree, any discipline, fully completed. No exceptions for incomplete or in-progress degrees. Batch: 2025 and 2026 graduates are the primary eligible batch. 2024 graduates may be considered on an exceptional basis subject to thorough review and approval. Academic Scores: Minimum 70% aggregate in 12th grade (CBSE, ICSE, or equivalent) and minimum 70% in graduation. Communication: Excellent spoken and written English is mandatory. Communication below this standard will not progress past the assessment stage. Systems: Basic MS Excel and MS Word. Comfortable learning new billing and EHR software during training. Shift: 5:00 PM to 2:00 AM IST, onsite in Gurugram, 5 days a week. Non-negotiable. Notice Period: Immediate joiners strongly preferred. Performance Expectations During the Learning Journey Assessment pass rate: minimum passing threshold on every module assessment throughout classroom and OJT phases. Attendance: full attendance during all training phases is expected without exception. Assignment completion: all practice tasks and training exercises completed on time. Ramp-up accuracy: error rate within acceptable threshold during the 4-week production ramp-up. Production readiness: cleared for independent live work by end of the learning journey. Post Go Live Daily productivity: meet case or task targets for the assigned LOB consistently. Quality: accuracy rate maintained within client and internal benchmarks. SLA contribution: support team-level SLA compliance on assigned client accounts. Hiring Process Stage 1: Resume Screening. Verified against eligibility criteria: graduation year, degree completion, 70% score thresholds, and shift readiness. Stage 2: Pre-Hire Assessment. Aptitude, comprehension, and communication test conducted at the Gurugram office. Evaluates English proficiency, analytical basics, and role readiness. Stage 3: Technical Interview. Interview with the Training Department to assess learning ability, communication standard, and initial LOB suitability. Stage 4: Counseling Session. Shortlisted candidates attend a session with the Analytics and Operations team to fully understand the role, the learning journey, the shift, and career expectations before a final decision is made. Stage 5: Offer. Benefits & Perks Group Health Insurance: Medical insurance coverage. Complimentary Dinner: One meal provided during shift hours at the Gurugram office. Cab Facility: Two-way pick-up and drop for the night shift. Why Join Neolytix Structured Learning, Real Work 6 months of structured training before going live on client accounts, not tutorials, not simulations. You build real skills on real processes. Defined Career Ladder Management Trainee to Associate 1 to Associate 2 to Senior Associate to QA or SME. Your pace is driven by your performance. US Healthcare Exposure Work on live US client accounts from day one of going live. The domain experience you build here is globally relevant and career-defining. 270+ Provider Network Join a team serving over 270 US healthcare provider organizations across hospital systems, clinics, and specialty practices.

Location: Tbilisi, Georgia Workplace: onsite About Tabby Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 15 million users choose Tabby to stay in control of their spending and make the most out of their money. The company's flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 40,000 global brands and small businesses, including Amazon, Noon, IKEA and SHEIN, use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $10 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised over $1 billion in equity and debt funding from global and regional investors, and is now valued at $6.5 billion. About the role As People Experience Partner in Tbilisi, you will own the employee lifecycle for our teams in Georgia and Armenia, and Poland. The scope covers onboarding and offboarding, relocation and legalisation, day-to-day employee support, office management and on-site support for team events. This is a hands-on, operational role for someone who wants to build their HR career and grow with Tabby. The role is based in Tbilisi, with at least one day a week in the office. Key Responsibilities Onboarding and offboarding Manage pre-onboarding, onboarding and offboarding for employees in Georgia, Armenia and Poland. Make sure all documentation, local compliance and country-specific registrations are completed on time. Set new joiners up with access to the office or coworking space and the relevant team channels. Relocation and legalisation Advise employees on relocation options and support them through the process. Coordinate between employees and relocation agencies. Advise employees on required documents, residence and work permits, and local labour law. Keep the relocation tracker and relocation budgets up to date. Employee support and office Handle day-to-day employee queries on policies and documentation. Issue employment confirmations, salary certificates and other letters on request. Keep employee records accurate. Manage the Tbilisi office: supplies, vendors, and welcoming new joiners and visitors. Events and engagement Organise team events in the region: source venues and vendors, manage logistics and resolve issues on the day. Act as the local culture representative and support company-wide engagement initiatives. Skills, Knowledge and Expertise 2+ years of experience in HR operations, people operations or a similar role, preferably in a fast-paced, international company. Hands-on experience with onboarding, offboarding and employee documentation. Strong organisational skills and the ability to manage several topics at once. Clear communication and the ability to build trust with employees and managers. Discretion in handling confidential and sensitive information. Fluent English. Based in Tbilisi and able to work from the office at least once a week. Nice to have Experience with employee relocation, visas, or residence and work permits. Knowledge of labour law in Georgia, Armenia or Poland. Experience organising events or managing an office. Russian, Georgian or Armenian. Experience with an HRIS such as BambooHR, HiBob or Workday. Benefits A flexible working model with trust and autonomy from day one. A high-growth environment with ownership and responsibility that will accelerate your career. Participation in the company's employee stock options program. Flexi Perks: a monetary benefit to spend on what matters most to your health, well-being, education or professional development. You should be comfortable with the idea that the quality of your work will influence the shape of your career.

Location: Cairo, Egypt Workplace: onsite About Us: Tabby is on a mission to give people power over their money. For too long, financial systems have worked for the institutions that built them, not the people using them. Runaway interest, fine print and limited access have left many behind, feeling shut out of a system that wasn't setting them up for success. We're building a different kind of system—in a complete money app to send, spend and save. One that's clear, flexible and puts people and businesses in control. Founded in 2019, we serve customers and businesses across Saudi Arabia, the United Arab Emirates and Kuwait. Millions of customers and 65,000 global brands, government services and small businesses rely on us today. What began as a better way to pay at checkout has grown into a financial system working the way it should have all along. About the Role: The role supports the Enterprise Risk Management (ERM) function by keeping its core processes running to a reliable cycle — risk and incident records, policy administration, new product approval coordination and the reporting calendar — so that the risk information reaching senior management and committees is complete, accurate and on time. The role works closely with the ERM Manager and first-line stakeholders across the business. Key Responsibilities Support the quarterly risk reporting cycle, including collection and validation of metrics, pack production and committee materials. Maintain risk registers, incident records and action trackers, ensuring entries are complete, current and supported by evidence. Administer the policy programme — tracking review and approval status, formatting, version control and the governance calendar. Support the risk and control self-assessment cycle — scheduling checks, chasing evidence, and populating workpapers and trackers. Support the maintenance of the risk appetite framework and key risk indicators, including data sourcing and validation with metric owners. Support ERM training and awareness activity, including delivery logistics, materials and completion records. Work closely with first-line stakeholders to collect, chase and quality-check risk information, escalating gaps and delays promptly. Support internal audit and regulatory requests by preparing documentation and audit-ready evidence. Support ERM governance and tooling, including use and administration of GRC tools and maintenance of documentation. Skills, Knowledge & Expertise 2–4 years' experience in risk, GRC, compliance, audit support or a related operational role within Financial Services, FinTech, Payments or another regulated environment. Working knowledge of risk registers, risk reporting and control documentation, with the ability to apply concepts pragmatically. Strong organisational skills and attention to detail, with the ability to run several recurring cycles in parallel and keep each to deadline. Confident coordinating across functions and seniority levels, including remotely, and comfortable chasing stakeholders for information. Excellent written and verbal communication skills in English, including experience preparing clear risk reports and presentations. Proficiency in Excel and PowerPoint; hands-on experience using or supporting GRC tools a strong advantage. Job Benefits 2–4 years' experience in business continuity, operational resilience, operational risk or a related role within Financial Services, FinTech, Payments or another regulated environment. Practical working knowledge of business continuity and resilience concepts — business impact analysis, recovery objectives, continuity planning and testing — with the ability to apply them pragmatically. Awareness of regulatory expectations for operational resilience; familiarity with CBUAE requirements or an equivalent regime is an advantage. Strong stakeholder engagement skills, with the confidence to run workshops and interviews with department heads and to challenge the answers constructively. Excellent written and verbal communication skills, including experience preparing clear plans, reports and presentations.

Location: Dubai, UAE Workplace: onsite About Us: Tabby is on a mission to give people power over their money. For too long, financial systems have worked for the institutions that built them, not the people using them. Runaway interest, fine print and limited access have left many behind, feeling shut out of a system that wasn't setting them up for success. We're building a different kind of system—in a complete money app to send, spend and save. One that's clear, flexible and puts people and businesses in control. Founded in 2019, we serve customers and businesses across Saudi Arabia, the United Arab Emirates and Kuwait. Millions of customers and 65,000 global brands, government services and small businesses rely on us today. What began as a better way to pay at checkout has grown into a financial system working the way it should have all along. About the Role: The role supports and independently delivers key elements of the business continuity and operational resilience programme across Tabby's UAE entities, helping the business understand which services must keep running, how long they can be disrupted before customers are harmed, and whether the firm could recover within that time. The role works closely with first-line owners across the business and supports the firm's response to regulatory expectations on operational resilience. Key Responsibilities Support the delivery of the business continuity and operational resilience programme across both UAE entities, in line with Central Bank of the UAE (CBUAE) expectations and the Group risk framework. Run the business impact analysis cycle with departments — gathering, challenging and consolidating what each team does, what breaks if it stops, and how quickly. Support the identification of critical operations and the setting of impact tolerances, working with first-line owners and senior management. Develop and maintain business continuity and recovery plans, dependency mapping and crisis playbooks, keeping them current, practical and usable. Coordinate and support the exercise and testing programme, including tabletop exercises, and document outcomes, lessons learned and follow-up actions. Support the maintenance and continuous improvement of business continuity and operational resilience policies, standards and methodologies. Contribute to resilience reporting for senior management, risk committees and the regulator, including maturity and self-assessment positions. Support third-party and technology dependency work where it affects the resilience of critical operations. Provide practical support to first-line owners on business impact analyses, recovery objectives, continuity planning and remediation actions. Act as a point of contact for internal audit and support regulatory or external reviews relating to business continuity and operational resilience. Support ERM governance and tooling, including use and administration of GRC tools, maintenance of documentation, committee materials, action trackers and audit-ready evidence. Skills, Knowledge & Expertise 2–4 years' experience in business continuity, operational resilience, operational risk or a related role within Financial Services, FinTech, Payments or another regulated environment. Practical working knowledge of business continuity and resilience concepts — business impact analysis, recovery objectives, continuity planning and testing — with the ability to apply them pragmatically. Awareness of regulatory expectations for operational resilience; familiarity with CBUAE requirements or an equivalent regime is an advantage. Strong stakeholder engagement skills, with the confidence to run workshops and interviews with department heads and to challenge the answers constructively. Excellent written and verbal communication skills, including experience preparing clear plans, reports and presentations. Job Benefits A working environment that gives you autonomy and responsibility from day one. You should be comfortable with the idea that the quality of your work will influence the shape of your career. Participation in the company’s employee stock options program. Health Insurance Flexi Perks: A monetary benefit that gives you the freedom to use it as you choose—whether for health and well-being, education and professional development or travel needs!

Location: Kazakhstan, Remote/Kazakhstan Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: Yerevan, Remote/Yerevan Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: Belgrade, Remote/Serbia Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: -, Remote/Uzbekistan Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: Tbilisi, Remote/Tbilisi Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Lead, Information Security to lead and shape Tabby’s information security function across both strategic and technical domains. This role will lead and own key security programmes across cloud security, security architecture, application security, vulnerability management, threat detection and incident response. Key Responsibilities Lead and contribute hands-on to security architecture and technical security reviews across cloud, infrastructure and product initiatives. Design and implement security controls across GCP and AWS , including IAM, CSPM and cloud-native security. Drive and contribute to Secure SDLC / DevSecOps , including SAST, DAST, SCA and container security. Lead vulnerability management and actively participate in penetration testing, VAPT and red/purple team engagements. Design and improve threat detection, SIEM use cases and security monitoring. Lead and participate in complex security incident investigations and response. Drive endpoint, infrastructure, network and firewall security initiatives. Automate security processes and develop security tooling where needed. Establish technical standards, security best practices and operating procedures. Support and mentor a team of security engineers and analysts. Work closely with Engineering, Infrastructure, Product, IT, Legal and Compliance teams to embed security across Tabby. Skills, Knowledge and Expertise Strong experience leading Information Security / Cyber Security functions in a senior technical or management role. 5+ years of experience in Information Security or Cybersecurity, with at least 2 years in a technical leadership or senior individual contributor role. Deep expertise across Cloud Security, Security Architecture, VAPT, AppSec/DevSecOps and Defensive Security . Experience leading security programmes and managing cross-functional initiatives. Strong knowledge of GCP/AWS, IAM, CSPM, SIEM, EDR/XDR and vulnerability management . Strong understanding of penetration testing, red/purple teaming, threat hunting and incident response . Experience with SAST, DAST, SCA and container security within CI/CD environments. Strong understanding of security architecture, threat modelling and enterprise security controls. Experience working within a regulated FinTech or banking environment . Knowledge of CBUAE, UAE PDPL, PCI-DSS, ISO 27001 and SOC 2 . Proven stakeholder management and strategic decision-making skills. CISSP/CISM and OSCP or equivalent certifications are preferred/required depending on the final hiring criteria.

Location: Belgrade, Remote Workplace: remote Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. About the role As the Senior Marketing Analyst for CRM, you will be the single analytics owner of CRM - the person marketers come to as a partner. You will own how campaigns are measured, how the communication data is built and trusted, and how insights turn into decisions: what to stop, scale, or fix. You will work closely with CRM marketers, Product, and the data platform team. You define what data you need and accept its quality; you do not build the pipelines yourself. What you will be doing Be the analytics partner to CRM marketers and Product on every initiative. Work with them on how to improve results. Answer "how do we correctly measure CRM activity" questions: choosing the right measurement design for a campaign type (always-on journeys vs one-off blasts vs product launches), defining what "delivered" means per channel, and defending the methodology to stakeholders Explain the technical side in plain language: how an experiment works, what a holdout is for, why a number can or cannot be trusted, so marketers make decisions they actually understand Own how CRM performance is measured: control groups, holdouts, A/B tests Own the CRM analytics data in dbt on BigQuery: who gets which message, on which channel, for which product, and how often Be the customer of the data platform team: say what data you need from the CRM and attribution tools, agree on timelines, and sign off on quality. You own what the numbers mean; they build the pipelines. Build Tableau dashboards that earn their place: visualisations stakeholders can open to check a hypothesis, answer their own question, or spot an insight in minutes. Keep the self-serve AI analytics assistant up to date, so non-technical colleagues can get answers to simple questions and run their own ad-hoc analysis without waiting for an analyst Work with a data science team, ask the right questions about a recommendation or propensity model, spot when it is not doing its job, and drive the test that proves it What you will need 3+ years of experience as a data/marketing/CRM analyst, with exposure to CRM, lifecycle, or retention analytics Strong SQL and hands-on dbt experience (we run dbt on BigQuery); experience designing and maintaining data models, not just querying Experience with CRM engagement platforms: Customer.io , MoEngage, Braze, Iterable or similar: you understand journeys, events, profile attributes, and delivery semantics Solid experience with marketing experimentation: holdout design, global static control groups, control group integrity, A/B tests, incrementality vs attribution Proficiency in Python Proficiency in Tableau (or similar BI tool) Proactive ownership: you find problems in data and processes before stakeholders do, audit your domain independently, and bring your own agenda and ideas on how to achieve business goals. Thinking partnership: stakeholders should be able to brainstorm with you, not just hand you tasks. First-time-right quality: numbers you ship are trusted without a second verification pass; Nice-to-have You now how Uplift modeling and causal ML works and can create MVP version Propensity / churn / LTV modeling Benefits: Locations We hire candidates based within four hours of Dubai time , with remote work available in eligible locations. Depending on your circumstances, we can also discuss an individual relocation plan to our hubs in Armenia, Georgia, Serbia, Poland, and Spain. What you can expect Flexible working hours, coordinated with your team and the needs of your role. Autonomy and responsibility from day one. Opportunities to grow through the quality and impact of your work. Participation in our employee stock option program. We’re committed to an inclusive, high-performing workplace where people from different backgrounds have the support to grow and achieve their goals. If this sounds like the right opportunity for you, we’d love to hear from you.

Location: Belgrade, Remote Workplace: onsite About Tabby Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 15 million users choose Tabby to stay in control of their spending and make the most out of their money. The company's flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 40,000 global brands and small businesses, including Amazon, Noon, IKEA and SHEIN, use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $10 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised over $1 billion in equity and debt funding from global and regional investors, and is now valued at $6.5 billion. About the role As our People Experience Partner in Tbilisi, you will own the employee lifecycle for our teams in Georgia, Armenia, and Poland. The scope covers onboarding and offboarding, relocation and legalisation, day-to-day employee support, office management and on-site support for team events. This is a hands-on, operational role for someone who wants to build their HR career and grow with Tabby. The role is based in Tbilisi, with at least one day a week in the office. Key Responsibilities Onboarding and offboarding Manage pre-onboarding, onboarding and offboarding for employees in Georgia, Armenia and Poland. Make sure all documentation, local compliance and country-specific registrations are completed on time. Set new joiners up with access to the office or coworking space and the relevant team channels. Relocation and legalisation Advise employees on relocation options and support them through the process. Coordinate between employees and relocation agencies. Advise employees on required documents, residence and work permits, and local labour law. Keep the relocation tracker and relocation budgets up to date. Employee support and office Handle day-to-day employee queries on policies and documentation. Issue employment confirmations, salary certificates and other letters on request. Keep employee records accurate. Manage the Tbilisi office: supplies, vendors, and welcoming new joiners and visitors. Events and engagement Organise team events in the region: source venues and vendors, manage logistics and resolve issues on the day. Act as the local culture representative and support company-wide engagement initiatives. Skills, Knowledge and Expertise 2+ years of experience in HR operations, people operations or a similar role, preferably in a fast-paced, international company. Hands-on experience with onboarding, offboarding and employee documentation. Strong organisational skills and the ability to manage several topics at once. Clear communication and the ability to build trust with employees and managers. Discretion in handling confidential and sensitive information. Fluent English. Based in Tbilisi and able to work from the office at least once a week. Nice to have Experience with employee relocation, visas, or residence and work permits. Knowledge of labour law in Georgia, Armenia or Poland. Experience organising events or managing an office. Russian, Georgian or Armenian. Experience with an HRIS such as BambooHR, HiBob or Workday. Benefits A flexible working model with trust and autonomy from day one. A high-growth environment with ownership and responsibility that will accelerate your career. Participation in the company's employee stock options program. Flexi Perks: a monetary benefit to spend on what matters most to your health, well-being, education or professional development. You should be comfortable with the idea that the quality of your work will influence the shape of your career.

Location: Dubai, UAE Workplace: onsite About us: Tabby is on a mission to give people power over their money. For too long, financial systems have worked for the institutions that built them, not the people using them. Runaway interest, fine print and limited access have left many behind, feeling shut out of a system that wasn't setting them up for success. We're building a different kind of system—in a complete money app to send, spend and save. One that's clear, flexible and puts people and businesses in control. Founded in 2019, we serve customers and businesses across Saudi Arabia, the United Arab Emirates and Kuwait. Millions of customers and 65,000 global brands, government services and small businesses rely on us today. What began as a better way to pay at checkout has grown into a financial system working the way it should have all along. About the role: The Senior Information Security Specialist (GRC) independently leads complex governance, risk, and compliance activities and serves as a subject matter expert in one or more GRC domains — enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management. The role produces high-quality GRC deliverables, provides technical mentoring to junior and mid-level team members, and contributes directly to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms. The Senior Specialist bridges technical execution and programme leadership, collaborating with leads, legal, audit, and business stakeholders to deliver mature, effective GRC outcomes aligned with the UAE Fintech regulatory environment. Key Responsibilities Information Security Governance Leadership: Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks, ensuring alignment with CSF, NCA ECC, ISO 27001, and PCI-DSS. Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives. Monitor and proactively track regulatory and legal developments affecting information security, assessing impact and recommending updates to the governance framework. Prepare and review governance documentation (RACI matrices, security charter updates, governance committee packs) and present findings to senior stakeholders. Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off. Mentor junior team members on governance documentation quality, regulatory interpretation, and risk assessment methodology. Enterprise Risk Management: Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organisation's risk appetite. Own and maintain the enterprise information security risk register, ensuring accuracy, currency, and appropriate escalation of significant risks. Lead BIA processes for critical business functions, coordinating with asset owners, analysing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning. Design and execute control effectiveness testing programmes, producing findings reports with gap analysis and risk-ranked remediation recommendations. Lead third-party information security risk management, designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register. Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption. Compliance Programme Delivery: Lead compliance monitoring activities for CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS, producing gap analyses, treatment plans, and periodic compliance status reports. Manage internal and external audit cycles, coordinating evidence collection, reviewing evidence quality, engaging with auditors, and tracking remediation to closure. Design and deliver the security awareness programme, producing targeted content for different staff segments, conducting awareness sessions, and analysing effectiveness metrics. Develop and maintain GRC programme metrics dashboards, ensuring KPIs and KRIs are accurately measured and presented to senior management on schedule. Lead the integration of information security requirements into third-party contracts, procurement processes, and major project onboarding. Contribute to the development of the information security programme strategy, identifying capability improvement opportunities and recommending investment priorities to the Lead. Cross-Functional Collaboration & Knowledge Leadership: Serve as the primary GRC point of contact for assigned business and technology teams, providing expert guidance on security requirements, risk treatment, and compliance obligations. Lead information classification and security requirements reviews for significant IT, product, and business projects. Contribute to the GRC knowledge base, developing reusable templates, guidance documents, and training materials for internal use. Represent the GRC function in cross-functional working groups, project steering committees, and regulatory workstreams. Skills, Knowledge and Expertise Education: Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field. A Master's degree in Information Security, Risk Management, or Business Administration is an advantage. Experience: 3+ years of progressive professional experience in information security governance, risk management, or compliance. Demonstrable experience independently leading risk assessment cycles, regulatory compliance programmes, or audit coordination activities. In-depth knowledge of at least two regulatory frameworks applicable to Fintech environments (CSF, NCA ECC, PDPL, ISO 27001, PCI-DSS) is required. Experience in a regulated Fintech or banking environment is strongly preferred. Certifications & Licences: ISO 27001 Lead Implementer (required). CRISC (Certified in Risk and Information Systems Control) or CISM: required or actively working toward. CDPSE (Certified Data Privacy Solutions Engineer) is an advantage for PDPL specialists. Benefits A working environment that gives you autonomy and responsibility from day one. You should be comfortable with the idea that the quality of your work will influence the shape of your career. Participation in the company’s employee stock options program. Health Insurance Flexi Perks: A monetary benefit that gives you the freedom to use it as you choose—whether for health and well-being, education and professional development or travel needs!

Location: Riyadh, KSA Workplace: onsite The Lead Anti-Fraud Officer independently leads complex governance, risk, and compliance activities and serves as a subject matter expert in one or more GRC domains — enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management. The role produces high-quality GRC deliverables, provides technical mentoring to junior and mid-level team members, and contributes directly to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms. The Lead Anti-Fraud Officer operates as a bridge between technical execution and programme leadership — collaborating with leads, legal, audit, and business stakeholders to drive mature and effective GRC outcomes aligned with the Saudi Fintech regulatory environment. Key Responsibilities Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks. Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives. Monitor and proactively track regulatory and legal developments affecting information security — assessing impact and recommending updates to the governance framework. Prepare and review governance documentation — RACI matrices, security charter updates, governance committee packs — and present findings to senior stakeholders. Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off. Mentor GR1–GR2 team members on governance documentation quality, regulatory interpretation, and risk assessment methodology. Enterprise Risk Management Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organization's risk appetite. Own and maintain the enterprise information security risk register — ensuring accuracy, currency, and appropriate escalation of significant risks. Lead BIA processes for critical business functions — coordinating with asset owners, analysing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning. Design and execute control effectiveness testing programmes, producing findings reports with gap analysis and risk-ranked remediation recommendations. Lead third-party information security risk management — designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register. Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption. Compliance Programme Delivery Lead compliance monitoring activities for CFFR, NCA ECC, PDPL, ISO 27001, and PCI-DSS — producing gap analyses, treatment plans, and periodic compliance status reports. Manage internal and external audit cycles — coordinating evidence collection, reviewing evidence quality, engaging with auditors, and tracking remediation to closure. Design and deliver the security awareness programme — producing targeted content for different staff segments, conducting awareness sessions, and analysing effectiveness metrics. Develop and maintain GRC programme metrics dashboards, ensuring KPIs and KRIs are accurately measured and presented to senior management on schedule. Lead the integration of information security requirements into third-party contracts, procurement processes, and major project onboarding. Contribute to the development of the information security programme strategy, identifying capability improvement opportunities and recommending investment priorities to the Lead. Cross-Functional Collaboration & Knowledge Leadership Serve as the primary GRC point of contact for assigned business and technology teams — providing expert guidance on security requirements, risk treatment, and compliance obligations. Lead information classification and security requirements reviews for significant IT, product, and business projects. Contribute to the GRC knowledge base — developing reusable templates, guidance documents, and training materials for internal use. Represent the GRC function in cross-functional working groups, project steering committees, and regulatory workstreams. Perform additional responsibilities as assigned by management. Skills, Knowledge and Expertise Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field. A Master's degree in Information Security, Risk Management, or Business Administration is an advantage. 3–5 years of progressive professional experience in information security governance, risk management, or compliance. Demonstrable experience independently leading risk assessment cycles, regulatory compliance programmes, or audit coordination activities. In-depth knowledge of the CFFR framework is required. Experience in a regulated Fintech or banking environment is strongly preferred. Benefits We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees. Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone. You will have an opportunity to learn and grow in one of the fastest growing fintech companies in the region We offer you relocation support as well as we guide you through all the process. We’ll set you up with the devices required for your work.

Location: Riyadh, KSA Workplace: onsite This is a role for a true hunter. We are scaling one of the fastest-moving BNPL platforms in the region, and we are looking for a hungry, self-driven Business Development Executive to take our SME merchant acquisition engine to the next level. This is a 100% outbound sales role — there are no inbound leads and no pre-assigned deals. You'll be set up with the tools and prospect lists to hit the ground running, but building your pipeline from zero is on you. You will own the full sales cycle end-to-end: identifying high-potential SME merchants, opening doors with founders and decision-makers, running consultative discovery, pitching game-changing financial solutions, negotiating commercial terms and driving merchants all the way through onboarding to live activation. If you thrive in a fast-paced, high-growth, entrepreneurial environment, love the thrill of the close, and want real ownership from day one — this is your seat. Key Responsibilities Build the Pipeline — From Zero • Own end-to-end pipeline generation through relentless, self-generated outbound activity. • Use the tools and prospect lists provided as a launchpad — then take the pipeline far beyond them. • Research and map high-potential SME merchants, verticals and micro-markets. • Identify and engage business owners, founders and key decision-makers. • Execute high-volume cold calling, multi-channel outreach, field visits and merchant meetings. • Consistently generate qualified opportunities with zero reliance on inbound or marketing-sourced leads. • Keep the funnel healthy — continuously replenish, qualify and prioritise. • Use CRM and sales data to track your KPIs, read your funnel and sharpen conversion. Sell, Close, Activate • Own opportunities end-to-end: prospect > discovery > pitch > close > onboarding > activation. • Run consultative, value-based discovery with SME owners to uncover real business pain. • Pitch and sell BNPL, LTF and our expanding suite of merchant financial solutions. • Deliver compelling product demos and tailored commercial proposals. • Handle objections with confidence and drive deals to signature. • Stay hands-on until the merchant is fully live and transacting. Commercial & Negotiation • Lead commercial conversations with SME merchants and articulate clear value. • Negotiate within approved commercial frameworks to land win-win outcomes. • Secure the right internal approvals and keep deals moving at pace. • Escalate complex commercial matters appropriately — while retaining full ownership of the opportunity. Cross-Functional Collaboration • Partner closely with Risk, Scoring, Onboarding, Product and Operations. • Understand internal requirements and constraints and work with them, not around them. • Proactively chase down blockers and drive outstanding actions to closure. • Act as the bridge between the merchant and internal stakeholders. • Feed merchant insight and market intelligence back into the business. Merchant Experience & Growth • Support merchants through a smooth, friction-free onboarding journey. • Drive activation and follow up post go-live to ensure adoption. • Spot early issues, capture merchant feedback and route it to the right teams. • Be genuinely merchant-obsessed — the relationship does not end at signature. Product & Market Agility • Become a subject-matter expert on BNPL and LTF. • Ramp fast on new propositions as they launch — including SME Financing and Tabby Card. • Adapt pitch, positioning and messaging as products, processes and market conditions evolve. • Thrive in ambiguity — we are building as we scale. Skills, Knowledge and Expertise • 1–2 years of professional experience in sales, business development or another target-driven commercial role. • Proven outbound sales and prospecting track record — you have personally generated your own pipeline. • Demonstrated ability to create opportunities independently, from a standing start. • Bachelor's degree. • Fluent Arabic and English. • Exceptional communication, presence and interpersonal skills. • Strong commercial acumen and negotiation ability. • Comfortable and energised by a target-driven, high-accountability environment. • Ability to independently own, manage and forecast a pipeline. • Comfortable working with CRM and sales data — tracking KPIs, analysing your funnel and prioritising on evidence (Excel / Google Sheets level) • Grit, resilience, persistence and relentless follow-through. Nice to Have (Not a Deal-Breaker) • B2B or SME sales exposure. • FinTech, BNPL, payments, banking or lending background. • Financial or technology solution selling. • Merchant acquisition or field sales experience. • Track record selling directly to business owners and decision-makers. • CRM proficiency and data-driven pipeline discipline. • Strong Excel / Google Sheets and CRM reporting — pivot tables, dashboards, basic funnel analysis. Benefits We are an international team of inspired professionals located all over the globe. We  have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees. Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone. You will have an opportunity to learn and grow in one of the fastest growing fin tech companies in the region We offer you relocation support as well as we guide you through all the process. We’ll set you up with the devices required for your work.

Location: Kuwait City, Kuwait Workplace: onsite About Tabby: Tabby is the GCC's leading shopping and payments platform, giving millions of people across Saudi Arabia and the UAE more control in the way they spend, save and earn. Headquartered in Riyadh, we've grown into one of the largest fintech companies to come out of the Arab world, working with +65,000 sellers, from global names like Apple, IKEA, Adidas and Shein to the region's leading retail groups. We're now building a local team on the ground in Kuwait, with a renewed presence in the market coming soon. This is a rare chance to join us at the start of a local launch, shaping how we show up for Kuwaiti shoppers and sellers from day one, backed by the scale, technology and track record we've built across the region. If you want to help us build something significant in Kuwait, backed by proven regional success, we want to hear from you. About the role: We are looking for a hands-on Senior Risk Manager to help build Tabby’s risk capabilities in Kuwait, with combined responsibility for enterprise and credit risk. As one of our first local hires, you will establish the governance, policies, risk appetite and reporting required for launch, while providing credit risk oversight as the portfolio grows. You will work closely with Kuwait leadership and Group Risk, as well as Product, Compliance, Finance and Operations, to ensure we scale responsibly and meet local regulatory expectations. Key Responsibilities Building and maintaining Tabby’s local risk management framework for Kuwait, covering enterprise and credit risk and aligning it with Group standards and applicable regulatory requirements. Developing the local risk strategy, risk appetite statement, policies, limits, governance forums and management reporting required for launch and ongoing operations by aligning with Group standard and adapted to local requirements Owning the enterprise risk process, including risk identification and assessment, the risk register, key risk indicators, emerging-risk reviews, residual risk positions and remediation tracking. Providing independent risk challenges on new products, partnerships, customer journeys, operating models and other material business initiatives. Leading local credit risk oversight across the customer lifecycle, including underwriting and eligibility rules, credit limits, affordability, collections outcomes and portfolio quality, focusing on local regulatory requirements. Partnering with Group Risk and Product teams to calibrate credit strategies for Kuwait and assess model, policy and limit changes. Establishing clear early-warning indicators, thresholds and reporting to support timely, data-informed risk decisions. Preparing risk assessments, reporting and recommendations for local leadership, risk committees, the Board and regulators, as applicable. Supporting licensing activities, regulatory submissions, examinations and information requests in partnership with Compliance, Legal and other control functions as well as acting as primary risk contact for Internal Audit Coordinating risk input into business continuity, outsourcing and third-party risk, operational incidents and control assessments. Promoting a practical risk culture and helping teams understand how risks should be identified, assessed, escalated and managed as well as ensuring material risks and control gaps are escalated and addressed at the right level. Helping shape the future Kuwait risk organisation and supporting hiring as the business scales. You should apply if You have strong risk management experience within banking, fintech, consumer lending, payments or another regulated financial-services environment. You bring meaningful hands-on experience across both enterprise risk and credit risk, rather than exposure limited to governance or oversight. You have built or materially improved risk frameworks, policies, risk appetite, governance structures, reporting and control processes. You understand consumer credit risk across underwriting, credit policy, portfolio monitoring, collections performance and loss drivers.. You understand enterprise risk disciplines including risk and control assessments, KRIs, incident and issue management, operational resilience, third-party risk and emerging risks. You understand the Kuwait regulatory environment; experience engaging with the Central Bank of Kuwait or another GCC financial-services regulator. You can operate independently in a new-market environment and are comfortable building the essentials yourself before a wider team is in place. You can balance strong governance with practical, proportionate execution and constructively challenge senior stakeholders when required. You communicate complex risk topics clearly and can prepare decision-ready materials for leadership, governance forums and regulators. You work effectively across Product, Data, Operations, Compliance, Finance, Legal and Internal Audit. You hold a bachelor’s degree in Finance, Economics, Risk Management, Business, Mathematics or a related field; FRM, PRM, CFA or a comparable qualification is an advantage. You are professionally fluent in English; Arabic is an advantage

Location: Riyadh, KSA Workplace: onsite Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money. The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region. Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion. We are looking for a Cyber Security Lead to join our Information Security team in Riyadh. You will provide technical leadership across defensive security, while managing a team of security engineers and analysts and driving security initiatives across the organization. Key Responsibilities Lead security architecture and design reviews across IT, cloud, and product initiatives. Drive cloud security across GCP and AWS, including IAM, cloud security posture, and infrastructure security. Lead the Secure SDLC / DevSecOps programme, including application security and security tooling across CI/CD. Own vulnerability management , including vulnerability remediation, penetration testing and red team engagements. Oversee endpoint, infrastructure and network security , including EDR, DLP and firewall security. Lead detection engineering, threat intelligence and incident response , including complex security investigations. Manage and develop a team of security engineers and analysts , including mentoring, performance management and career development. Partner with Engineering, IT, Compliance and other teams to improve Tabby’s overall security posture and security standards. Skills, Knowledge and Expertise 5+ years of experience in cybersecurity / information security , including technical leadership or senior-level responsibilities. Experience leading security programmes across security architecture, cloud security, vulnerability management and application security . Strong understanding of defensive and offensive security , including penetration testing, red/purple teaming, threat hunting and incident response. Hands-on experience with SIEM, EDR/XDR, vulnerability management, CSPM, DLP and security monitoring platforms . Strong knowledge of GCP and/or AWS , IAM, cloud security and infrastructure security. Experience with DevSecOps, Secure SDLC, SAST, DAST, SCA and container security . Strong scripting and automation skills and the ability to develop or oversee security tooling and integrations. Knowledge of SAMA CSF, NCA ECC, PCI-DSS and ISO 27001 . Experience working in a regulated FinTech or banking environment . Strong technical leadership, stakeholder management and team development skills. CISSP/CISM and OSCP or equivalent certifications are required.