Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 5 days ago

Senior Anti-Fraud Officer

Tabby43 open roles

Where
Riyadh, Saudi Arabia
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Anti-Fraud OfficerTabby · Riyadh, Saudi Arabia

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Tabby's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Tabby postings stay open a median of 2 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: first seen 5 days ago

Tabby median: 2 days open

The posting

The Lead Anti-Fraud Officer independently leads complex governance, risk, and compliance activities and serves as a subject matter expert in one or more GRC domains — enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management. The role produces high-quality GRC deliverables, provides technical mentoring to junior and mid-level team members, and contributes directly to the continuous improvement of the organization's GRC framework, risk treatment processes, and compliance reporting mechanisms.

The Lead Anti-Fraud Officer operates as a bridge between technical execution and programme leadership — collaborating with leads, legal, audit, and business stakeholders to drive mature and effective GRC outcomes aligned with the Saudi Fintech regulatory environment.

Key Responsibilities

  • Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks.
  • Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives.
  • Monitor and proactively track regulatory and legal developments affecting information security — assessing impact and recommending updates to the governance framework.
  • Prepare and review governance documentation — RACI matrices, security charter updates, governance committee packs — and present findings to senior stakeholders.
  • Lead the preparation of regulatory self-assessments and compliance attestations, coordinating evidence gathering and quality-reviewing submissions before senior sign-off.
  • Mentor GR1–GR2 team members on governance documentation quality, regulatory interpretation, and risk assessment methodology.

Enterprise Risk Management

  • Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organization's risk appetite.
  • Own and maintain the enterprise information security risk register — ensuring accuracy, currency, and appropriate escalation of significant risks.
  • Lead BIA processes for critical business functions — coordinating with asset owners, analysing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning.
  • Design and execute control effectiveness testing programmes, producing findings reports with gap analysis and risk-ranked remediation recommendations.
  • Lead third-party information security risk management — designing assessment frameworks, conducting in-depth vendor reviews, and maintaining the third-party risk register.
  • Produce executive-quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption.

Compliance Programme Delivery

  • Lead compliance monitoring activities for CFFR, NCA ECC, PDPL, ISO 27001, and PCI-DSS — producing gap analyses, treatment plans, and periodic compliance status reports.
  • Manage internal and external audit cycles — coordinating evidence collection, reviewing evidence quality, engaging with auditors, and tracking remediation to closure.
  • Design and deliver the security awareness programme — producing targeted content for different staff segments, conducting awareness sessions, and analysing effectiveness metrics.
  • Develop and maintain GRC programme metrics dashboards, ensuring KPIs and KRIs are accurately measured and presented to senior management on schedule.
  • Lead the integration of information security requirements into third-party contracts, procurement processes, and major project onboarding.
  • Contribute to the development of the information security programme strategy, identifying capability improvement opportunities and recommending investment priorities to the Lead.

Cross-Functional Collaboration & Knowledge Leadership

  • Serve as the primary GRC point of contact for assigned business and technology teams — providing expert guidance on security requirements, risk treatment, and compliance obligations.
  • Lead information classification and security requirements reviews for significant IT, product, and business projects.
  • Contribute to the GRC knowledge base — developing reusable templates, guidance documents, and training materials for internal use.
  • Represent the GRC function in cross-functional working groups, project steering committees, and regulatory workstreams.
  • Perform additional responsibilities as assigned by management.

Skills, Knowledge and Expertise

  • Bachelor's degree in Information Technology, Computer Science, Software Engineering, Cybersecurity, Risk Management, or a related field.
  • A Master's degree in Information Security, Risk Management, or Business Administration is an advantage.
  • 3–5 years of progressive professional experience in information security governance, risk management, or compliance. Demonstrable experience independently leading risk assessment cycles, regulatory compliance programmes, or audit coordination activities.
  • In-depth knowledge of the CFFR framework is required.
  • Experience in a regulated Fintech or banking environment is strongly preferred.

Benefits

  • We have an inclusive company culture, embracing diversity, integrity and transparency. We strive for work-life balance and cherish the moments you spend with your loved ones, off-work. In the same spirit as for our product, we are caring and nurturing for our employees.
  • Our people are granted 100% trust and freedom to apply their own vision and come up with their ideas from day 1 at Tabby. You are the one who takes responsibility for your area of work. We encourage everyone to think and make decisions like Tabby was their own business, well because it is. Our employee stock options programme is available for everyone.
  • You will have an opportunity to learn and grow in one of the fastest growing fintech companies in the region
  • We offer you relocation support as well as we guide you through all the process.
  • We’ll set you up with the devices required for your work.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Tabby's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Tabby's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Tabby's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.