Location: Spain, Remote/Spain
Workplace: remote
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money.
The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.
Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.
Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion.
We’re looking for a
Senior Database Administrator
to join our Infrastructure team and help build and maintain reliable, high-performance database systems at scale. You’ll work on challenging technical problems, drive improvements in database reliability and performance, and contribute to the infrastructure powering Tabby’s growing business.
Key Responsibilities:
Design, construct, install, and maintain large relational databases.
Maintain the integrity and security of the database, including backups and recovery procedures.
Implement and manage disaster recovery and failover systems.
Monitor database performance, implement changes, and apply new patches and versions when required.
Optimize queries for performance.
Collaborate with development teams to optimize database usage.
Set up and maintain database replication, clustering, mirroring, and other high availability strategies.
Use and understand tools like PgBouncer and modern monitoring systems.
Stay up to date with the latest database technologies and best practices.
What you’ll bring:
Proven hands-on experience with PostgreSQL (required), including setup, replication, upgrades, monitoring, and performance tuning.
Ability to write and optimize complex SQL queries.
Experience with backup and recovery strategies, including Point-in-Time Recovery (PITR).
Strong understanding of database design, documentation, and development best practices.
Experience with ClickHouse is a plus.
Working knowledge of scripting/programming languages such as Bash, Python, or Go.
Experience managing DBaaS solutions on cloud platforms (GCP or AWS is a plus).
Experience migrating large databases across cloud platforms.
Familiarity with modern DevOps practices, including Kubernetes, Terraform, and Helm.
Experience with real-time data streaming technologies such as Debezium or Flink.
Relevant certifications or formal training in database management are a plus.
Strong problem-solving skills and excellent communication abilities.
Professional proficiency in English (B2 level or higher).
What we offer:
Full-time B2B contract
Fully remote setup
Up to 20% tax allowance
22 paid leave days annually
Stock options (ESOP) in a fast-scaling, pre-IPO company
Flexi benefits you can use for wellness, travel, or learning
Work alongside a high-performing, international engineering team in a global fintech unicorn
Relocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation and legal setup.
УдалённоseniorSpain, Remote/Spain; Relocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation and legal setup
Location: Belgrade, Remote/Serbia
Workplace: remote
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money.
The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.
Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.
Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion.
We’re looking for a
Senior Database Administrator
to join our Infrastructure team and help build and maintain reliable, high-performance database systems at scale. You’ll work on challenging technical problems, drive improvements in database reliability and performance, and contribute to the infrastructure powering Tabby’s growing business.
Key Responsibilities:
Design, construct, install, and maintain large relational databases.
Maintain the integrity and security of the database, including backups and recovery procedures.
Implement and manage disaster recovery and failover systems.
Monitor database performance, implement changes, and apply new patches and versions when required.
Optimize queries for performance.
Collaborate with development teams to optimize database usage.
Set up and maintain database replication, clustering, mirroring, and other high availability strategies.
Use and understand tools like PgBouncer and modern monitoring systems.
Stay up to date with the latest database technologies and best practices.
What you’ll bring:
Proven hands-on experience with PostgreSQL (required), including setup, replication, upgrades, monitoring, and performance tuning.
Ability to write and optimize complex SQL queries.
Experience with backup and recovery strategies, including Point-in-Time Recovery (PITR).
Strong understanding of database design, documentation, and development best practices.
Experience with ClickHouse is a plus.
Working knowledge of scripting/programming languages such as Bash, Python, or Go.
Experience managing DBaaS solutions on cloud platforms (GCP or AWS is a plus).
Experience migrating large databases across cloud platforms.
Familiarity with modern DevOps practices, including Kubernetes, Terraform, and Helm.
Experience with real-time data streaming technologies such as Debezium or Flink.
Relevant certifications or formal training in database management are a plus.
Strong problem-solving skills and excellent communication abilities.
Professional proficiency in English (B2 level or higher).
What we offer:
Full-time B2B contract
Fully remote setup
Up to 20% tax allowance
22 paid leave days annually
Stock options (ESOP) in a fast-scaling, pre-IPO company
Flexi benefits you can use for wellness, travel, or learning
Work alongside a high-performing, international engineering team in a global fintech unicorn
Relocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation and legal setup.
Location: Kazakhstan, Remote/Kazakhstan
Workplace: remote
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money.
The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.
Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.
Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion.
We’re looking for a
Senior Database Administrator
to join our Infrastructure team and help build and maintain reliable, high-performance database systems at scale. You’ll work on challenging technical problems, drive improvements in database reliability and performance, and contribute to the infrastructure powering Tabby’s growing business.
Key Responsibilities:
Design, construct, install, and maintain large relational databases.
Maintain the integrity and security of the database, including backups and recovery procedures.
Implement and manage disaster recovery and failover systems.
Monitor database performance, implement changes, and apply new patches and versions when required.
Optimize queries for performance.
Collaborate with development teams to optimize database usage.
Set up and maintain database replication, clustering, mirroring, and other high availability strategies.
Use and understand tools like PgBouncer and modern monitoring systems.
Stay up to date with the latest database technologies and best practices.
What you’ll bring:
Proven hands-on experience with PostgreSQL (required), including setup, replication, upgrades, monitoring, and performance tuning.
Ability to write and optimize complex SQL queries.
Experience with backup and recovery strategies, including Point-in-Time Recovery (PITR).
Strong understanding of database design, documentation, and development best practices.
Experience with ClickHouse is a plus.
Working knowledge of scripting/programming languages such as Bash, Python, or Go.
Experience managing DBaaS solutions on cloud platforms (GCP or AWS is a plus).
Experience migrating large databases across cloud platforms.
Familiarity with modern DevOps practices, including Kubernetes, Terraform, and Helm.
Experience with real-time data streaming technologies such as Debezium or Flink.
Relevant certifications or formal training in database management are a plus.
Strong problem-solving skills and excellent communication abilities.
Professional proficiency in English (B2 level or higher).
What we offer:
Full-time B2B contract
Fully remote setup
Up to 20% tax allowance
22 paid leave days annually
Stock options (ESOP) in a fast-scaling, pre-IPO company
Flexi benefits you can use for wellness, travel, or learning
Work alongside a high-performing, international engineering team in a global fintech unicorn
Relocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation and legal setup.
Location: Belgrade, Remote
Workplace: onsite
About Tabby
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 15 million users choose Tabby to stay in control of their spending and make the most out of their money.
The company's flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 40,000 global brands and small businesses, including Amazon, Noon, IKEA and SHEIN, use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores. Tabby generates over $10 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest and fastest-growing FinTech in the GCC region.
Tabby launched in 2019 and has since raised over $1 billion in equity and debt funding from global and regional investors, and is now valued at $6.5 billion.
About the role
As our People Experience Partner in Tbilisi, you will own the employee lifecycle for our teams in Georgia, Armenia, and Poland. The scope covers onboarding and offboarding, relocation and legalisation, day-to-day employee support, office management and on-site support for team events.
This is a hands-on, operational role for someone who wants to build their HR career and grow with Tabby. The role is based in Tbilisi, with at least one day a week in the office.
Key Responsibilities
Onboarding and offboarding
Manage pre-onboarding, onboarding and offboarding for employees in Georgia, Armenia and Poland.
Make sure all documentation, local compliance and country-specific registrations are completed on time.
Set new joiners up with access to the office or coworking space and the relevant team channels.
Relocation and legalisation
Advise employees on relocation options and support them through the process.
Coordinate between employees and relocation agencies.
Advise employees on required documents, residence and work permits, and local labour law.
Keep the relocation tracker and relocation budgets up to date.
Employee support and office
Handle day-to-day employee queries on policies and documentation.
Issue employment confirmations, salary certificates and other letters on request.
Keep employee records accurate.
Manage the Tbilisi office: supplies, vendors, and welcoming new joiners and visitors.
Events and engagement
Organise team events in the region: source venues and vendors, manage logistics and resolve issues on the day.
Act as the local culture representative and support company-wide engagement initiatives.
Skills, Knowledge and Expertise
2+ years of experience in HR operations, people operations or a similar role, preferably in a fast-paced, international company.
Hands-on experience with onboarding, offboarding and employee documentation.
Strong organisational skills and the ability to manage several topics at once.
Clear communication and the ability to build trust with employees and managers.
Discretion in handling confidential and sensitive information.
Fluent English.
Based in Tbilisi and able to work from the office at least once a week.
Nice to have
Experience with employee relocation, visas, or residence and work permits.
Knowledge of labour law in Georgia, Armenia or Poland.
Experience organising events or managing an office.
Russian, Georgian or Armenian.
Experience with an HRIS such as BambooHR, HiBob or Workday.
Benefits
A flexible working model with trust and autonomy from day one.
A high-growth environment with ownership and responsibility that will accelerate your career.
Participation in the company's employee stock options program.
Flexi Perks: a monetary benefit to spend on what matters most to your health, well-being, education or professional development.
You should be comfortable with the idea that the quality of your work will influence the shape of your career.
Location: Belgrade, Remote
Workplace: remote
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money.
The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.
Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.
Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion.
We’re looking for a
Senior Database Administrator
to join our Infrastructure team and help build and maintain reliable, high-performance database systems at scale. You’ll work on challenging technical problems, drive improvements in database reliability and performance, and contribute to the infrastructure powering Tabby’s growing business.
Key Responsibilities:
Design, construct, install, and maintain large relational databases.
Maintain the integrity and security of the database, including backups and recovery procedures.
Implement and manage disaster recovery and failover systems.
Monitor database performance, implement changes, and apply new patches and versions when required.
Optimize queries for performance.
Collaborate with development teams to optimize database usage.
Set up and maintain database replication, clustering, mirroring, and other high availability strategies.
Use and understand tools like PgBouncer and modern monitoring systems.
Stay up to date with the latest database technologies and best practices.
What you’ll bring:
Proven hands-on experience with PostgreSQL (required), including setup, replication, upgrades, monitoring, and performance tuning.
Ability to write and optimize complex SQL queries.
Experience with backup and recovery strategies, including Point-in-Time Recovery (PITR).
Strong understanding of database design, documentation, and development best practices.
Experience with ClickHouse is a plus.
Working knowledge of scripting/programming languages such as Bash, Python, or Go.
Experience managing DBaaS solutions on cloud platforms (GCP or AWS is a plus).
Experience migrating large databases across cloud platforms.
Familiarity with modern DevOps practices, including Kubernetes, Terraform, and Helm.
Experience with real-time data streaming technologies such as Debezium or Flink.
Relevant certifications or formal training in database management are a plus.
Strong problem-solving skills and excellent communication abilities.
Professional proficiency in English (B2 level or higher).
What we offer:
Full-time B2B contract
Fully remote setup
Up to 20% tax allowance
22 paid leave days annually
Stock options (ESOP) in a fast-scaling, pre-IPO company
Flexi benefits you can use for wellness, travel, or learning
Work alongside a high-performing, international engineering team in a global fintech unicorn
Relocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation and legal setup.
Location: Belgrade, Remote
Workplace: remote
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money.
The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.
Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.
Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion.
We’re looking for a
Senior Technical Product Manager
with a strong system analysis background to join Tabby’s Financial Platform domain. Every product Tabby launches passes through this domain. We define the financial logic behind each product: how it charges, settles, accounts, and reports. We make sure every launch meets regulatory and financial audit requirements, and we turn one-off needs into reusable platform solutions that the rest of the company builds on.
This is a cross-functional role spanning product, system design, financial operations, and platform architecture. It suits you if you want to shape how the financial side of every product is designed, and to see those designs through to robust, best-in-class implementation.
What you’ll do:
Turn business, product, finance, and regulatory needs into clear system requirements and implementation-ready specifications
Define how money and financial data flow end to end across products, partners, and internal systems, from transaction to accounting record
Contribute to platform architecture and service interaction design across product services and CoreBank components
Work with PMs, engineers, Finance, Compliance, and adjacent teams to define scope, dependencies, and delivery phases
Identify the services, integrations, and teams affected by each change
Shape and prioritize the team backlog with the product lead
Support engineering and QA through implementation, covering edge cases, expected behavior, and incident analysis
Keep technical and functional documentation current and usable for engineers and business stakeholders alike
What you’ll bring:
3+ years as a Technical PM, System Analyst, or Business Analyst
Upper-Intermediate English or higher
Ability to break down large business processes into clear technical flows
Experience with distributed, service-based architectures
Solid API and integration design knowledge (REST, SOAP, gRPC)
Strong documentation skills: functional specs, sequence diagrams, state models, API contracts, data models
Knowledge of UML, BPMN, or similar notations
Strong plus:
Fintech, payments, banking, wallets, cards, lending, or ledger/accounting experience
Hands-on work with financial transactions, reconciliation, or money movement systems
Exposure to regulated environments, such as central bank requirements or e-invoicing
ERP integration experience (NetSuite or similar)
Product mindset and appetite for broader ownership over time
What success looks like:
Ambiguous financial, product, or regulatory requirements become clear, scalable platform designs
Teams ship changes safely in critical money movement systems
Reusable platform capabilities improve consistency across products
You grow from owning requirements into shaping the direction of the platform
What we offer:
Full-time B2B contract
Up to 20% tax allowance
22 paid leave days annually
Stock options (ESOP) in a fast-scaling, pre-IPO company
Flexi benefits you can use for wellness, travel, or learning
Work alongside a high-performing, international engineering team in a global fintech unicorn
Relocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation, and legal setup (if needed).
Location: Dubai, UAE
Workplace: onsite
About us:
Tabby is on a mission to give people power over their money. For too long, financial systems have worked for the institutions that built them, not the people using them. Runaway interest, fine print and limited access have left many behind, feeling shut out of a system that wasn't setting them up for success.
We're building a different kind of system—in a complete money app to send, spend and save. One that's clear, flexible and puts people and businesses in control. Founded in 2019, we serve customers and businesses across Saudi Arabia, the United Arab Emirates and Kuwait. Millions of customers and 65,000 global brands, government services and small businesses rely on us today.
What began as a better way to pay at checkout has grown into a financial system working the way it should have all along.
About the role:
The Senior Information Security Specialist (GRC) independently leads complex governance, risk, and compliance activities and serves as a subject matter expert in one or more GRC domains — enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management.
The role produces high-quality GRC deliverables, provides technical mentoring to junior and mid-level team members, and contributes directly to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms. The Senior Specialist bridges technical execution and programme leadership, collaborating with leads, legal, audit, and business stakeholders to deliver mature, effective GRC outcomes aligned with the UAE Fintech regulatory environment.
Key Responsibilities
Information Security Governance Leadership:
Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks, ensuring alignment with CSF, NCA ECC, ISO 27001, and PCI-DSS.
Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives.
Monitor and proactively track regulatory and legal developments affecting information security, assessing impact and recommending updates to the governance framework.
Prepare and review governance documentation (RACI matrices, security charter updates, governance committee packs) and present findings to senior stakeholders.
Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off.
Mentor junior team members on governance documentation quality, regulatory interpretation, and risk assessment methodology.
Enterprise Risk Management:
Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organisation's risk appetite.
Own and maintain the enterprise information security risk register, ensuring accuracy, currency, and appropriate escalation of significant risks.
Lead BIA processes for critical business functions, coordinating with asset owners, analysing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning.
Design and execute control effectiveness testing programmes, producing findings reports with gap analysis and risk-ranked remediation recommendations.
Lead third-party information security risk management, designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register.
Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption.
Compliance Programme Delivery:
Lead compliance monitoring activities for CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS, producing gap analyses, treatment plans, and periodic compliance status reports.
Manage internal and external audit cycles, coordinating evidence collection, reviewing evidence quality, engaging with auditors, and tracking remediation to closure.
Design and deliver the security awareness programme, producing targeted content for different staff segments, conducting awareness sessions, and analysing effectiveness metrics.
Develop and maintain GRC programme metrics dashboards, ensuring KPIs and KRIs are accurately measured and presented to senior management on schedule.
Lead the integration of information security requirements into third-party contracts, procurement processes, and major project onboarding.
Contribute to the development of the information security programme strategy, identifying capability improvement opportunities and recommending investment priorities to the Lead.
Cross-Functional Collaboration & Knowledge Leadership:
Serve as the primary GRC point of contact for assigned business and technology teams, providing expert guidance on security requirements, risk treatment, and compliance obligations.
Lead information classification and security requirements reviews for significant IT, product, and business projects.
Contribute to the GRC knowledge base, developing reusable templates, guidance documents, and training materials for internal use.
Represent the GRC function in cross-functional working groups, project steering committees, and regulatory workstreams.
Skills, Knowledge and Expertise
Education:
Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field.
A Master's degree in Information Security, Risk Management, or Business Administration is an advantage.
Experience:
3+ years of progressive professional experience in information security governance, risk management, or compliance.
Demonstrable experience independently leading risk assessment cycles, regulatory compliance programmes, or audit coordination activities.
In-depth knowledge of at least two regulatory frameworks applicable to Fintech environments (CSF, NCA ECC, PDPL, ISO 27001, PCI-DSS) is required.
Experience in a regulated Fintech or banking environment is strongly preferred.
Certifications & Licences:
ISO 27001 Lead Implementer (required).
CRISC (Certified in Risk and Information Systems Control) or CISM: required or actively working toward.
CDPSE (Certified Data Privacy Solutions Engineer) is an advantage for PDPL specialists.
Benefits
A working environment that gives you autonomy and responsibility from day one.
You should be comfortable with the idea that the quality of your work will influence the shape of your career.
Participation in the company’s employee stock options program.
Health Insurance
Flexi Perks: A monetary benefit that gives you the freedom to use it as you choose—whether for health and well-being, education and professional development or travel needs!
Location: Riyadh, KSA
Workplace: onsite
As the Compliance Officer, you will support the effective implementation and ongoing management of the organization's compliance framework to ensure adherence to SAMA regulatory requirements, applicable laws, and internal policies. You will independently perform compliance monitoring, regulatory analysis, risk assessments, regulatory obligations tracking, and compliance reviews, while providing day-to-day advisory support to business functions.
Key Responsibilities
Support the implementation and ongoing management of the organization's compliance framework in line with SAMA regulations and applicable regulatory requirements.
Monitor SAMA circulars, regulatory updates, guidance, and relevant industry developments and assess their impact on the organization's activities.
Conduct regulatory research and analysis and translate applicable requirements into practical compliance actions and internal requirements.
Support the development, review, and maintenance of compliance policies, procedures, standards, and controls.
Perform compliance monitoring and testing activities to assess adherence to regulatory requirements, policies, procedures, and established controls.
Conduct compliance risk assessments and identify potential regulatory risks, control gaps, and areas requiring remediation.
Maintain regulatory obligations trackers and monitor the implementation and completion of SAMA regulatory requirements across relevant business functions.
Provide day-to-day compliance advisory support to business teams on SAMA regulatory requirements, policies, processes, and operational activities.
Review products, services, processes, partnerships, and business initiatives to identify applicable compliance requirements and potential regulatory risks.
Support the preparation, review, and submission of regulatory reports and other required regulatory communications.
Conduct compliance reviews and assessments relating to potential regulatory breaches, policy violations, and control weaknesses.
Document compliance findings, recommendations, and remediation actions and monitor progress against agreed timelines.
Support investigations into potential compliance breaches and regulatory issues, escalating material or complex matters to the Compliance Manager.
Support regulatory examinations, internal audits, and independent compliance reviews by preparing documentation, coordinating responses, and tracking remediation activities.
Maintain accurate and up-to-date compliance registers, records, trackers, and supporting documentation.
Prepare compliance reports, monitoring results, regulatory updates, risk assessments, and other materials for management review.
Support the development and delivery of compliance training and awareness activities.
Work closely with Risk, Legal, Internal Audit, Operations, Information Security, and business teams to strengthen compliance controls and address regulatory requirements.
Identify opportunities to improve compliance processes, controls, monitoring activities, and reporting.
Escalate material compliance risks, breaches, control deficiencies, and regulatory concerns to the Compliance Lead in a timely manner.
Skills, Knowledge and Expertise
Bachelor's degree in Law, Finance, Business Administration, Accounting, Risk Management, Compliance, or a related discipline.
At least 3 years of experience in Compliance, Regulatory Compliance, Risk Management, Governance, Audit, or a related function, preferably within banking, financial services, fintech, or another regulated environment.
Good working knowledge of SAMA regulatory requirements and applicable Saudi financial services regulations.
Good understanding of compliance frameworks, SAMA regulatory obligations, compliance monitoring and testing, risk assessments, and internal controls.
Experience conducting compliance monitoring, regulatory research, compliance reviews, risk assessments, or related compliance activities.
Experience developing, reviewing, and maintaining compliance policies, procedures, and controls.
Ability to interpret SAMA regulatory requirements and translate them into practical business requirements and compliance actions.
Experience supporting regulatory examinations, internal audits, compliance reviews, investigations, and remediation activities.
Strong analytical and problem-solving skills, with the ability to identify regulatory risks and recommend appropriate actions.
Strong communication and stakeholder management skills, with the ability to work effectively with business and control functions.
Strong attention to detail and ability to maintain accurate compliance documentation and records.
Ability to manage multiple priorities and work independently on assigned compliance activities in a fast-paced regulated environment.
High level of integrity, professionalism, confidentiality, and sound regulatory judgment.
Compliance certification such as CAMS, CCO, or an equivalent certification is preferred.
Additional certifications in risk management, governance, financial crime, or regulatory compliance are considered an advantage.
Benefits
We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees.
Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone.
You will have an opportunity to learn and grow in one of the fastest growing fintech companies in the region
We offer you relocation support as well as we guide you through all the process.
We’ll set you up with the devices required for your work.
Location: Riyadh, KSA
Workplace: onsite
We're looking for an experienced Portfolio Growth Manager to own the growth and health of Tabby's card program end-to-end.
This role sits at the intersection of scheme relationships, compliance and commercial strategy working closely with Card Scheme, Compliance, Risk and Product to grow card issuance, activation and usage while keeping the program fully aligned with scheme rules and regulatory requirements.
You'll lead portfolio growth initiatives, manage scheme relationships and reporting, and own the compliance obligations tied to the card program — from scheme mandates to regulatory requirements. You're comfortable balancing a commercial growth agenda with the discipline compliance demands.
If you enjoy growing a card program commercially while also being the person who keeps it compliant and audit-ready, this role is for you.
Key Responsibilities
Own portfolio growth strategy for Tabby's card program including driving growth across the funnel and identify and execute growth levers pricing, incentives and partnerships.
Manage day-to-day relationships with card schemes, including program reporting, mandates, incentives and new scheme initiatives.
Ensure the card program's ongoing compliance with scheme rules, regulatory requirements and internal risk policies.
Partner with Compliance, Risk and Legal to manage scheme audits, certifications and regulatory filings related to the card program.
Track and report portfolio performance (activation, spend, retention) and compliance status to internal and external stakeholders.
Stay ahead of scheme rule changes and regulatory updates, translating them into action plans across the business.
Collaborate with Product and Engineering to prioritize features that support both growth and compliance goals.
Skills, Knowledge and Expertise
3–4 years of experience in banking or fintech, with direct exposure to card programs, scheme management or compliance.
Working knowledge of card scheme rule and the regulatory requirements governing card programs.
Strong analytical skills, comfortable working with portfolio performance data to drive growth decisions.
Excellent stakeholder management skills to work across Compliance, Risk, Marketing, Product & Tech and external scheme partners.
Strong written and verbal communication skills in English & Arabic a must
Benefits
We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees.
Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone.
You will have an opportunity to learn and grow in one of the fastest growing fintech companies in the region
We offer you relocation support as well as we guide you through all the process.
We’ll set you up with the devices required for your work.
Location: Riyadh, KSA
Workplace: onsite
The Lead Anti-Fraud Officer independently leads complex governance, risk, and compliance activities and serves as a subject matter expert in one or more GRC domains — enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management. The role produces high-quality GRC deliverables, provides technical mentoring to junior and mid-level team members, and contributes directly to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms.
The Lead Anti-Fraud Officer operates as a bridge between technical execution and programme leadership — collaborating with leads, legal, audit, and business stakeholders to drive mature and effective GRC outcomes aligned with the Saudi Fintech regulatory environment.
Key Responsibilities
Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks.
Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives.
Monitor and proactively track regulatory and legal developments affecting information security — assessing impact and recommending updates to the governance framework.
Prepare and review governance documentation — RACI matrices, security charter updates, governance committee packs — and present findings to senior stakeholders.
Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off.
Mentor GR1–GR2 team members on governance documentation quality, regulatory interpretation, and risk assessment methodology.
Enterprise Risk Management
Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organization's risk appetite.
Own and maintain the enterprise information security risk register — ensuring accuracy, currency, and appropriate escalation of significant risks.
Lead BIA processes for critical business functions — coordinating with asset owners, analysing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning.
Design and execute control effectiveness testing programmes, producing findings reports with gap analysis and risk-ranked remediation recommendations.
Lead third-party information security risk management — designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register.
Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption.
Compliance Programme Delivery
Lead compliance monitoring activities for CFFR, NCA ECC, PDPL, ISO 27001, and PCI-DSS — producing gap analyses, treatment plans, and periodic compliance status reports.
Manage internal and external audit cycles — coordinating evidence collection, reviewing evidence quality, engaging with auditors, and tracking remediation to closure.
Design and deliver the security awareness programme — producing targeted content for different staff segments, conducting awareness sessions, and analysing effectiveness metrics.
Develop and maintain GRC programme metrics dashboards, ensuring KPIs and KRIs are accurately measured and presented to senior management on schedule.
Lead the integration of information security requirements into third-party contracts, procurement processes, and major project onboarding.
Contribute to the development of the information security programme strategy, identifying capability improvement opportunities and recommending investment priorities to the Lead.
Cross-Functional Collaboration & Knowledge Leadership
Serve as the primary GRC point of contact for assigned business and technology teams — providing expert guidance on security requirements, risk treatment, and compliance obligations.
Lead information classification and security requirements reviews for significant IT, product, and business projects.
Contribute to the GRC knowledge base — developing reusable templates, guidance documents, and training materials for internal use.
Represent the GRC function in cross-functional working groups, project steering committees, and regulatory workstreams.
Perform additional responsibilities as assigned by management.
Skills, Knowledge and Expertise
Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field.
A Master's degree in Information Security, Risk Management, or Business Administration is an advantage.
3–5 years of progressive professional experience in information security governance, risk management, or compliance. Demonstrable experience independently leading risk assessment cycles, regulatory compliance programmes, or audit coordination activities.
In-depth knowledge of the
CFFR framework
is required.
Experience in a regulated Fintech or banking environment is strongly preferred.
Benefits
We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees.
Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone.
You will have an opportunity to learn and grow in one of the fastest growing fintech companies in the region
We offer you relocation support as well as we guide you through all the process.
We’ll set you up with the devices required for your work.
Location: Riyadh, KSA
Workplace: onsite
This is a role for a true hunter.
We are scaling one of the fastest-moving BNPL platforms in the region, and we are looking for a hungry, self-driven Business Development Executive to take our SME merchant acquisition engine to the next level. This is a 100% outbound sales role — there are no inbound leads and no pre-assigned deals. You'll be set up with the tools and prospect lists to hit the ground running, but building your pipeline from zero is on you.
You will own the full sales cycle end-to-end: identifying high-potential SME merchants, opening doors with founders and decision-makers, running consultative discovery, pitching game-changing financial solutions, negotiating commercial terms and driving merchants all the way through onboarding to live activation.
If you thrive in a fast-paced, high-growth, entrepreneurial environment, love the thrill of the close, and want real ownership from day one — this is your seat.
Key Responsibilities
Build the Pipeline — From Zero
• Own end-to-end pipeline generation through relentless, self-generated outbound activity.
• Use the tools and prospect lists provided as a launchpad — then take the pipeline far beyond them.
• Research and map high-potential SME merchants, verticals and micro-markets.
• Identify and engage business owners, founders and key decision-makers.
• Execute high-volume cold calling, multi-channel outreach, field visits and merchant meetings.
• Consistently generate qualified opportunities with zero reliance on inbound or marketing-sourced leads.
• Keep the funnel healthy — continuously replenish, qualify and prioritise.
• Use CRM and sales data to track your KPIs, read your funnel and sharpen conversion.
Sell, Close, Activate
• Own opportunities end-to-end: prospect > discovery > pitch > close > onboarding > activation.
• Run consultative, value-based discovery with SME owners to uncover real business pain.
• Pitch and sell BNPL, LTF and our expanding suite of merchant financial solutions.
• Deliver compelling product demos and tailored commercial proposals.
• Handle objections with confidence and drive deals to signature.
• Stay hands-on until the merchant is fully live and transacting.
Commercial & Negotiation
• Lead commercial conversations with SME merchants and articulate clear value.
• Negotiate within approved commercial frameworks to land win-win outcomes.
• Secure the right internal approvals and keep deals moving at pace.
• Escalate complex commercial matters appropriately — while retaining full ownership of the opportunity.
Cross-Functional Collaboration
• Partner closely with Risk, Scoring, Onboarding, Product and Operations.
• Understand internal requirements and constraints and work with them, not around them.
• Proactively chase down blockers and drive outstanding actions to closure.
• Act as the bridge between the merchant and internal stakeholders.
• Feed merchant insight and market intelligence back into the business.
Merchant Experience & Growth
• Support merchants through a smooth, friction-free onboarding journey.
• Drive activation and follow up post go-live to ensure adoption.
• Spot early issues, capture merchant feedback and route it to the right teams.
• Be genuinely merchant-obsessed — the relationship does not end at signature.
Product & Market Agility
• Become a subject-matter expert on BNPL and LTF.
• Ramp fast on new propositions as they launch — including SME Financing and Tabby Card.
• Adapt pitch, positioning and messaging as products, processes and market conditions evolve.
• Thrive in ambiguity — we are building as we scale.
Skills, Knowledge and Expertise
• 1–2 years of professional experience in sales, business development or another target-driven commercial role.
• Proven outbound sales and prospecting track record — you have personally generated your own pipeline.
• Demonstrated ability to create opportunities independently, from a standing start.
• Bachelor's degree.
• Fluent Arabic and English.
• Exceptional communication, presence and interpersonal skills.
• Strong commercial acumen and negotiation ability.
• Comfortable and energised by a target-driven, high-accountability environment.
• Ability to independently own, manage and forecast a pipeline.
• Comfortable working with CRM and sales data — tracking KPIs, analysing your funnel and prioritising on evidence (Excel / Google Sheets level)
• Grit, resilience, persistence and relentless follow-through.
Nice to Have (Not a Deal-Breaker)
• B2B or SME sales exposure.
• FinTech, BNPL, payments, banking or lending background.
• Financial or technology solution selling.
• Merchant acquisition or field sales experience.
• Track record selling directly to business owners and decision-makers.
• CRM proficiency and data-driven pipeline discipline.
• Strong Excel / Google Sheets and CRM reporting — pivot tables, dashboards, basic funnel analysis.
Benefits
We are an international team of inspired professionals located all over the globe.
We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees.
Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone.
You will have an opportunity to learn and grow in one of the fastest growing fin tech companies in the region
We offer you relocation support as well as we guide you through all the process.
We’ll set you up with the devices required for your work.
Location: Kuwait City, Kuwait
Workplace: onsite
About Tabby:
Tabby
is the GCC's leading shopping and payments platform, giving millions of people across Saudi Arabia and the UAE more control in the way they spend, save and earn. Headquartered in Riyadh, we've grown into one of the largest fintech companies to come out of the Arab world, working with +65,000 sellers, from global names like Apple, IKEA, Adidas and Shein to the region's leading retail groups.
We're now building a local team on the ground in Kuwait, with a renewed presence in the market coming soon. This is a rare chance to join us at the start of a local launch, shaping how we show up for Kuwaiti shoppers and sellers from day one, backed by the scale, technology and track record we've built across the region.
If you want to help us build something significant in Kuwait, backed by proven regional success, we want to hear from you.
About the role:
We are looking for a hands-on
Senior Risk Manager
to help build Tabby’s risk capabilities in Kuwait, with combined responsibility for enterprise and credit risk. As one of our first local hires, you will establish the governance, policies, risk appetite and reporting required for launch, while providing credit risk oversight as the portfolio grows. You will work closely with Kuwait leadership and Group Risk, as well as Product, Compliance, Finance and Operations, to ensure we scale responsibly and meet local regulatory expectations.
Key Responsibilities
Building and maintaining Tabby’s local risk management framework for Kuwait, covering enterprise and credit risk and aligning it with Group standards and applicable regulatory requirements.
Developing the local risk strategy, risk appetite statement, policies, limits, governance forums and management reporting required for launch and ongoing operations by aligning with Group standard and adapted to local requirements
Owning the enterprise risk process, including risk identification and assessment, the risk register, key risk indicators, emerging-risk reviews, residual risk positions and remediation tracking.
Providing independent risk challenges on new products, partnerships, customer journeys, operating models and other material business initiatives.
Leading local credit risk oversight across the customer lifecycle, including underwriting and eligibility rules, credit limits, affordability, collections outcomes and portfolio quality, focusing on local regulatory requirements.
Partnering with Group Risk and Product teams to calibrate credit strategies for Kuwait and assess model, policy and limit changes.
Establishing clear early-warning indicators, thresholds and reporting to support timely, data-informed risk decisions.
Preparing risk assessments, reporting and recommendations for local leadership, risk committees, the Board and regulators, as applicable.
Supporting licensing activities, regulatory submissions, examinations and information requests in partnership with Compliance, Legal and other control functions as well as acting as primary risk contact for Internal Audit
Coordinating risk input into business continuity, outsourcing and third-party risk, operational incidents and control assessments.
Promoting a practical risk culture and helping teams understand how risks should be identified, assessed, escalated and managed as well as ensuring material risks and control gaps are escalated and addressed at the right level.
Helping shape the future Kuwait risk organisation and supporting hiring as the business scales.
You should apply if
You have strong risk management experience within banking, fintech, consumer lending, payments or another regulated financial-services environment.
You bring meaningful hands-on experience across both enterprise risk and credit risk, rather than exposure limited to governance or oversight.
You have built or materially improved risk frameworks, policies, risk appetite, governance structures, reporting and control processes.
You understand consumer credit risk across underwriting, credit policy, portfolio monitoring, collections performance and loss drivers..
You understand enterprise risk disciplines including risk and control assessments, KRIs, incident and issue management, operational resilience, third-party risk and emerging risks.
You understand the Kuwait regulatory environment; experience engaging with the Central Bank of Kuwait or another GCC financial-services regulator.
You can operate independently in a new-market environment and are comfortable building the essentials yourself before a wider team is in place.
You can balance strong governance with practical, proportionate execution and constructively challenge senior stakeholders when required.
You communicate complex risk topics clearly and can prepare decision-ready materials for leadership, governance forums and regulators.
You work effectively across Product, Data, Operations, Compliance, Finance, Legal and Internal Audit.
You hold a bachelor’s degree in Finance, Economics, Risk Management, Business, Mathematics or a related field; FRM, PRM, CFA or a comparable qualification is an advantage.
You are professionally fluent in English; Arabic is an advantage
Location: Riyadh, KSA
Workplace: onsite
Tabby
creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 25 million users choose Tabby to stay in control of their spending and make the most out of their money.
The company’s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 70,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.
Tabby generates over $18 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.
Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $6,5 billion.
As
Information Security Engineer
, you’ll play a key part in monitoring and defending our infrastructure, applications, and cloud environments from cyber threats.
You’ll lead incident response efforts, develop and tune detection rules, investigate security events, and collaborate with cross-functional teams to strengthen our security posture.
Key Responsibilities
Security Monitoring & Detection
Monitor and analyze logs and alerts from a wide range of sources including firewalls, intrusion detection/prevention systems (IDS/IPS), endpoints, servers, and cloud platforms.
Perform correlation of events from multiple sources to identify advanced threats and unusual patterns of behavior.
Fine-tune alert thresholds and detection logic to reduce false positives and improve signal-to-noise ratio.
Maintain dashboards and reporting to provide real-time visibility into security posture.
Incident Response & Investigation
Serve as a frontline responder for security incidents, managing incidents through their lifecycle – detection, containment, eradication, recovery, and lessons learned.
Coordinate with internal stakeholders and external vendors during high-severity incidents or data breaches.
Perform root cause analysis and forensic investigations using endpoint and network-based artifacts.
Maintain detailed incident documentation and contribute to post-mortem analysis and reports.
Threat Intelligence & Detection Rule Development
Research emerging threats and trends.
Contribute to the creation and tuning of detection rules, threat-hunting queries, and use cases across multiple platforms including cloud environments.
Maintaining CTI Platform along with the integration of the CTI feeds with the security controls to have active CTI driven detections.
Collaboration and Communication
Communicate effectively with cross-functional teams including IT, DevOps, Risk, and Compliance during incidents and investigations.
Provide concise and clear updates during incident handling to stakeholders and management.
Mentor junior analysts and assist in training efforts within the SOC team.
Skills, Knowledge and Expertise
3–4 years of experience in a SOC or cybersecurity operations role, ideally in a fast-paced fintech or enterprise environment.
Strong knowledge of security best practices, including incident handling, alert triage, log analysis, and threat modeling.
Understanding of online technologies, REST APIs, microservices, and modern application architectures.
Experience working in a culturally diverse and collaborative environment.
Familiarity with DLP, AV, and anti-malware systems from an operational monitoring perspective.
Experience with phishing detection, user behavior analytics, and security awareness campaigns.
Security certifications such as Security+, CySA+, eCIR, eCTHPv2, GCIA, or GMON (preferred but not required).
Strong communication skills, especially for coordinating incident response and writing clear incident reports.
Experience with
SIEM platforms
,
SOAR tools
,
EDR/XDR
, and
Threat Intelligence platforms
.
Familiarity with cloud environments and cloud-native logging and monitoring tools.
Scripting experience (e.g.,
Python
) to automate tasks and improve SOC efficiency.
Location: Riyadh, KSA
Workplace: onsite
We're looking for an Information Security Specialist (GRC) to join Tabby! The successful candidate will independently execute governance, risk, and compliance activities across the Tabby's information security programme.
Key Responsibilities
Information Security Governance
Maintain and update the information security governance framework documentation, policy library, and associated standards and procedures.
Draft and revise information security policies, standards, and baselines, ensuring alignment with applicable regulatory requirements and business objectives.
Monitor and track changes in legal, regulatory, and contractual requirements affecting information security (SAMA CSF, PDPL, NCA ECC, PCI-DSS), updating the compliance register accordingly.
Maintain and update role and responsibility matrices (RACI), information security governance committee documentation, and reporting packs.
Coordinate security governance committee meetings — preparing agendas, minutes, and action tracking.
Produce internal and external communication materials related to information security governance, policies, and programme updates.
Information Risk Management
Execute information security risk assessments independently, applying the organization's risk assessment methodology and producing complete risk registers with identified threats, vulnerabilities, likelihood, impact, and treatment plans.
Maintain and update the information asset register — tracking asset owners, classifications, and associated risk profiles.
Lead business impact assessment (BIA) data collection activities, coordinating with asset owners and business units to capture accurate recovery objectives and criticality ratings.
Conduct control effectiveness evaluations for key information security controls, documenting findings and escalating gaps to the Lead for treatment.
Coordinate third-party information security risk assessments — preparing assessment questionnaires, reviewing vendor responses, and producing risk summaries.
Integrate risk and vulnerability data into procurement reviews, project onboarding, and change management processes.
Prepare periodic risk reports for senior review, highlighting emerging risks, significant changes in the risk profile, and the status of risk treatment actions.
Compliance & Programme Development
Monitor the organization's compliance posture against SAMA CSF, NCA ECC, PDPL, ISO 27001, and PCI-DSS — tracking control status, identifying gaps, and coordinating remediation.
Coordinate internal and external audit activities — gathering evidence packages, liaising with auditors, tracking findings, and monitoring remediation progress.
Support the preparation of regulatory submissions, self-assessments, and compliance attestations required by SAMA, NCA, and PCI Council.
Maintain and enhance the security awareness programme — developing training materials, scheduling communications, and tracking completion metrics.
Monitor KPIs and KRIs for the information security programme, preparing accurate and timely dashboards for senior management review.
Support the integration of information security requirements into procurement, project management, and change control processes.
Cross-Functional & General GRC Support
Maintain the information security policy, standard, and procedure library — managing version control, review cycles, and distribution.
Support information security initiatives across business and technology teams, providing GRC subject matter expertise on projects and change programmes.
Conduct information classification reviews and document security requirements for key business and IT projects.
Deliver information security awareness sessions and materials to targeted staff groups.
Provide analytical support for GRC team reporting, data gathering, and programme tracking activities.
Skills, Knowledge and Expertise
Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field.
1–3 years of professional experience in information security governance, risk management, compliance, or a closely related field. Hands-on experience with risk assessment execution, policy development, or compliance monitoring is required. Prior exposure to SAMA CSF, ISO 27001, PDPL, or NCA ECC requirements is a strong advantage. Experience in a regulated Fintech or banking environment is preferred.
ISO 27001 Foundation or Lead Implementer (preferred). CompTIA Security+ or equivalent.
Working toward CRISC (Certified in Risk and Information Systems Control) or CISM.
Benefits
We are an international team of inspired professionals located all over the globe.
We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees.
Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone.
You will have an opportunity to learn and grow in one of the fastest growing fin tech companies in the region
We offer you relocation support as well as we guide you through all the process.
We’ll set you up with the devices required for your work.
Location: Kuwait City, Kuwait
Workplace: onsite
About Tabby:
Tabby is the GCC's leading shopping and payments platform, giving millions of people across Saudi Arabia and the UAE more control in the way they spend, save and earn. Headquartered in Riyadh, we've grown into one of the largest fintech companies to come out of the Arab world, working with +65,000 sellers, from global names like Apple, IKEA, Adidas and Shein to the region's leading retail groups.
We're now building a local team on the ground in Kuwait, with a renewed presence in the market coming soon. This is a rare chance to join us at the start of a local launch, shaping how we show up for Kuwaiti shoppers and sellers from day one, backed by the scale, technology and track record we've built across the region.
If you want to help us build something significant in Kuwait, backed by proven regional success, we want to hear from you.
About the role
Tabby is the leading shopping and financial services app in the Middle East - 25M+ users, 65,000+ merchants across Saudi Arabia, the UAE and Kuwait. We're now building our Kuwait team.
This is a founding role. You'll support building the compliance function in Kiwait rather than inherit one, and act as our principal contact with the Central Bank of Kuwait.
Key Responsibilities
Own the CBK relationship - correspondence, inspections, information requests and supervisory dialogue
Lead the compliance workstream of our CBK registration and licensing programme
Build the Kuwait compliance framework from scratch: policies, controls, monitoring plan and risk assessments
Act as MLRO - own the AML/CFT programme, including STR filing, CDD, sanctions screening and transaction monitoring
Maintain the BNPL consumer protection framework covering dispute resolution, fee transparency and complaint handling
Track regulatory change, assess business impact and drive implementation with the relevant owners
Prepare compliance reporting for CBK and papers for the audit and risk committees
Conduct regular compliance assessments and audits, proactively identifying potential areas of non-compliance and recommending corrective actions to mitigate risks and ensure adherence to regulatory standards.
Provide strategic guidance and support to various departments within the organization on compliance-related matters, including regulatory changes and updates, ensuring that all business activities are conducted in a compliant manner.
Design and roll out efficient and effective compliance processes, leveraging technology and innovative solutions to streamline compliance workflows and enhance operational efficiency.
Collaborate with internal stakeholders, including senior management, to integrate compliance considerations into all aspects of business operations, including product development, marketing, and customer service.
Skills, Knowledge and Expertise
5+ years
in compliance, AML/CFT or regulatory advisory within a CBK-regulated business - a Kuwaiti bank, finance company, exchange house, or registered e-payment or e-money provider
Direct experience dealing with the CBK
, including inspections and regulatory submissions
Working knowledge of the CBK e-payment of funds regime and Kuwait's AML/CFT framework
A track record of
building
frameworks, not only administering them
Professional Arabic and English, including drafting regulatory correspondence in Arabic
Location: Riyadh, KSA
Workplace: onsite
About Tabby:
Tabby is on a mission to give people power over their money. For too long, financial systems have worked for the institutions that built them, not the people using them. Runaway interest, fine print and limited access have left many behind, feeling shut out of a system that wasn't setting them up for success.
We're building a different kind of system—in a complete money app to send, spend and save. One that's clear, flexible and puts people and businesses in control. Founded in 2019, we serve customers and businesses across Saudi Arabia, the United Arab Emirates and Kuwait. Millions of customers and 65,000 global brands, government services and small businesses rely on us today.
What began as a better way to pay at checkout has grown into a financial system working the way it should have all along.
About the role:
We are looking for a Financial Reporting Lead to support finance operations for our Saudi Arabia entity, ensuring accurate financial reporting, regulatory compliance, and strong financial governance. This role will support and oversee statutory reporting, tax compliance, treasury, audits, and internal controls while partnering closely with cross-functional teams to support business growth and new product launches. As a key member of the finance team, you will help strengthen finance processes, maintain compliance with SAMA, ZATCA, SOCPA, and IFRS requirements, and contribute to building a scalable finance function in one of our fastest-growing markets.
Key Responsibilities
Own and deliver the monthly, quarterly, and annual close for KSA, ensuring accuracy, timeliness (D+3 target), and completeness.
Prepare IFRS financial statements with local (SOCPA) adjustments, along with
supporting schedules and reconciliations.
Apply IFRS (esp. IFRS 9, 15, 16) and SOCPA standards correctly in the financial
statements, and keep accounting positions well documented.
Prepare and support ZATCA filings (CIT, Zakat, VAT, WHT, CTDF) and SAMA
regulatory/prudential returns, ensuring they reconcile to the financial statements.
Perform balance-sheet reconciliations and maintain the integrity of the general
ledger.
Support provisioning and ECL calculations under IFRS 9 for customer and merchant
receivables.
Support external audits — prepare audit-ready financials with complete
documentation and act as a key contact for auditors on reporting matters.
Maintain and strengthen internal controls, reconciliations, and segregation of duties
across reporting processes.
Support treasury and settlement reporting and related reconciliations (bank
accounts, merchant settlements).
Support intercompany and transfer-pricing reporting in coordination with Group Tax.
Drive process improvements and support ERP (Oracle NetSuite) reporting, data
integrity, and automation.
Mentor and review the work of junior finance team members.
Partner cross-functionally with Compliance, Legal, Product, and Operations to
support finance readiness for new product launches (wallet, BNPL, cards,
remittance, loyalty/cashback).
Skills, Knowledge and Expertise
3–5 years of experience in financial reporting, statutory reporting, or external audit, preferably in a fintech, bank, or Big 4 environment.
Strong technical knowledge of IFRS (esp. IFRS 9, 15, 16) and SOCPA/local GAAP,
with working knowledge of Saudi tax regulations (Zakat, Corporate Income Tax,
VAT, Withholding Tax).
Hands-on experience preparing IFRS financial statements with local adjustments
and running month-end close.
Experience supporting statutory audits and regulatory submissions to authorities
such as ZATCA and SAMA.
Professional qualification (CPA, ACCA, or SOCPA) — qualified or in progress preferred.
Advanced Excel skills; ERP experience preferred (Oracle NetSuite is a plus).
Strong analytical skills, attention to detail, and an ownership mindset.
Fluent in English and Arabic (written and verbal).
Job Benefits
A working environment that gives you autonomy and responsibility from day one.
You should be comfortable with the idea that the quality of your work will influence the shape of your career.
Participation in the company’s employee stock options program.
Health Insurance
Flexi Perks: A monetary benefit that gives you the freedom to use it as you choose—whether for health and well-being, education and professional development or travel needs!
Location: Riyadh, KSA
Workplace: onsite
BNPL businesses don't run on a single core system — they run on a chain of vendors: KYC providers doing identity
checks in milliseconds, bureau data feeding underwriting decisions, processors moving money at checkout, and
collections agencies chasing missed payments on our behalf. When any link in that chain fails, it isn't an internal
inconvenience — it's a customer who can't check out, a credit decision made on bad data, or a regulator asking why
a critical service went down with no warning.
As Vendor Risk Manager, you will own our third-party risk program end to end, from the first due diligence
questionnaire to the day a vendor is offboarded. You will be the person who can tell leadership, in plain terms,
which vendors carry the most risk and why, and you will make sure vendor failures never become customer failures.
Key Responsibilities
Due Diligence & Onboarding
Run due diligence on new vendors before contracts are signed, including financial health checks, SOC 2 / ISO 27001 review, breach history, and subprocessor mapping.
Issue a clear risk rating for every prospective vendor, with conditions attached rather than a simple pass or
fail, covering KYC, identity verification, fraud detection, credit bureau, payment processing, card issuing,
banking, and collections partners.
Sit inside the contracting process with Legal and Procurement to secure the terms that matter: audit rights,
breach notification windows, data localization commitments, exit assistance clauses, and SLAs tied to real penalties.
Risk Assessment & Ongoing Monitoring
Own vendor risk assessments across our active third-party portfolio, prioritizing critical and high-risk vendors for annual deep-dive reviews.
Build and run tiered monitoring cadences — quarterly for critical vendors such as KYC, payment processing, and banking partners, annual for the rest — tracking control drift, subprocessor changes, and
adverse media.
Maintain the concentration risk and critical-vendor register, and be ready to explain single points of failure, such as one bureau covering the majority of underwriting volume, and what the contingency plan actually
is.
Cross-Functional Partnership
Work with Product before new vendor integrations go live — you're in the room when a new checkout partner or fraud model vendor is being evaluated, not brought in after the contract is signed.
• Prepare vendor risk reporting for the Risk Committee and Board, translating control gaps and incident
trends into decisions leadership can act on.
Offboarding & Exit Management
Manage the offboarding process for exited vendors, confirming data deletion, access revocation, and transition continuity for anything customer-facing.
Ensure regulatory and contractual exit obligations are met and documented, particularly for vendors
classified as critical or important.
Skills, Knowledge & Expertise
3–4 years in third-party risk management, vendor risk, or operational risk, ideally at a payments company, lender, bank, or fintech where vendor failure has direct customer or regulatory consequences.
Working knowledge of NIST CSF, ISO 27001, SOC 2, and standardized assessment tools like SIG or
CAIQ — you know how to read a SOC 2 report and spot what's missing, not just file it away.
Familiarity with the regulatory landscape vendors sit inside: consumer credit rules, data privacy obligations
(GDPR/CCPA depending on footprint), PCI-DSS for anything touching card data, and
outsourcing/operational resilience expectations for critical third parties.
Comfort negotiating directly with vendors — you've pushed back on a processor's standard MSA, gotten a
fraud vendor to commit to a real SLA, and know when “our legal team will follow up” means the deal
needs to walk.
Ability to translate risk findings for people who don't think in risk terms, including explaining to a
commercial lead why a cheaper KYC vendor isn't worth the onboarding delay it will cause six months later.
Strong analytical skills with the ability to interpret vendor performance and control data to support
operational decisions.
Excellent communication and interpersonal skills, with the ability to interact effectively across all levels of
the organization.
Full professional proficiency in English required; Arabic is a plus.
Nice to have:
Direct BNPL or consumer credit experience — you've worked with bureau data, alternative credit scoring
vendors, or collections agencies specifically.
Hands-on experience with a GRC platform such as OneTrust, ProcessUnity, or Archer for assessment
workflows and vendor inventory.
CTPRP, CRISC, CISA, or CISM certification.
Location: Singapore
Cantonese - International Interpreter
Language: Cantonese
Are you a skilled interpreter looking for a flexible and rewarding opportunity? We are seeking talented individuals proficient in Cantonese and English to join our team of international interpreters. If you have a passion for languages and a commitment to providing excellent service, we want to hear from you!
Candidate Qualifications:
Fluency in English and Cantonese
Minimum 6 months interpretation experience preferred
Excellent listening, retention and note taking skills to maintain a high level of accuracy.
Render correct concepts and meanings according to the conventions of established interpretation protocol, avoiding omissions or additions.
Ability to explain certain cultural concepts to avoid miscommunication with permission or at the request of the client.
Technical Requirements:
90% English proficiency
Steady wired internet connection
USB wired headset
Windows 10 or Mac
What we offer you:
Fully remote. Interpreter works from his/her home office
Full-time contractor position
Immediate availability to start working after onboarding
Monthly payments
Per minute rate
Your responsibilities:
Answer calls professionally, acting according to the interpreter’s code of conduct
Be aware of the specific vocabulary of the industry the interpreter works with (healthcare and medical, specifically)
Go into internal professional training
Communicate and report to your team leader
*Based on your location, language testing and background check may be required*
Join us and become part of a dynamic team that values your skills. Apply today and start making a difference in the world of interpretation!
Singapore
УдалённоseniorRelocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation and legal setup
УдалённоseniorKazakhstan, Remote/Kazakhstan; Relocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation and legal setup
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
ОфисThe scope covers onboarding and offboarding, relocation and legalisation, day-to-day employee support, office management and on-site support for team events; Relocation and legalisation; Advise employees on relocation options and support them through the process; Coordinate between employees and relocation agencies; Keep the relocation tracker and relocation budgets up to date; Experience with employee relocation, visas, or residence and work permits
УдалённоseniorRelocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation and legal setup
УдалённоseniorRelocation support is available to our hubs in Armenia, Georgia, Serbia, Portugal, and Spain, including flights, temporary accommodation, and legal setup (if needed)
ОфисseniorDubai, UAE
ОфисWe offer you relocation support as well as we guide you through all the process
ОфисseniorWe offer you relocation support as well as we guide you through all the process
ОфисseniorWe offer you relocation support as well as we guide you through all the process
ОфисWe offer you relocation support as well as we guide you through all the process
ОфисseniorГеография найма не уточнена
ОфисГеография найма не уточнена
ОфисWe offer you relocation support as well as we guide you through all the process