Lead Anti Fraud Officer

What the work is

About the Role Tabby is seeking a Lead Anti-Fraud Officer to independently manage complex governance, risk, and compliance (GRC) activities. This full-time role requires 2-5 years of experience and involves serving as a subject matter expert in areas such as enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management. Role Context and Impact The Lead Anti-Fraud Officer will produce high-quality GRC deliverables, mentor junior and mid-level team members, and contribute to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms. This position acts as a crucial link between technical execution and program leadership, collaborating with leads, legal, audit, and business stakeholders to ensure mature and effective GRC outcomes aligned with the Saudi Fintech regulatory environment. Key Duties Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks. Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives. Monitor and proactively track regulatory and legal developments affecting information security, assessing impact and recommending updates to the governance framework. Prepare and review governance documentation, including RACI matrices, security charter updates, and governance committee packs, and present findings to senior stakeholders. Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off. Mentor GR1–GR2 team members on governance documentation quality, regulatory interpretation, and risk assessment methodology. Core Responsibilities Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organization's risk appetite. Own and maintain the enterprise information security risk register, ensuring accuracy, currency, and appropriate escalation of significant risks. Lead Business Impact Analysis (BIA) processes for critical business functions, coordinating with asset owners, analyzing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning. Design and execute control effectiveness testing programs, producing findings reports with gap analysis and risk-ranked remediation recommendations. Lead third-party information security risk management, designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register. Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption. Experience Required A minimum of 2-5 years of relevant experience in governance, risk, and compliance, specifically within information security or anti-fraud domains. Work Type This is a full-time position.