Senior Enterprise Risk Analyst

About the role

Tabby, a financial technology company serving customers and businesses across Saudi Arabia, the UAE and Kuwait, is hiring a Senior Enterprise Risk Analyst. The role supports the Enterprise Risk Management (ERM) function by keeping its core processes running reliably: risk and incident records, policy administration, new product approval coordination and the reporting calendar, so that risk information reaching senior management and committees is complete, accurate and on time. It works closely with the ERM Manager and first-line stakeholders.

Key responsibilities

• Support the quarterly risk reporting cycle, including collection and validation of metrics, pack production and committee materials.
• Maintain risk registers, incident records and action trackers, with entries complete, current and supported by evidence.
• Administer the policy programme: track review and approval status, handle formatting and version control, and maintain the governance calendar.
• Support the risk and control self-assessment cycle: schedule checks, chase evidence and populate workpapers and trackers.
• Support the risk appetite framework and key risk indicators, including data sourcing and validation with metric owners.
• Support ERM training and awareness activities, including logistics, materials and completion records.
• Work with first-line stakeholders to collect, chase and quality-check risk information, escalating gaps and delays promptly.
• Support internal audit and regulatory requests by preparing documentation and audit-ready evidence.
• Support ERM governance and tooling, including use and administration of GRC tools and documentation.

Required profile

• 2-4 years' experience in risk, GRC, compliance, audit support or a related operational role within Financial Services, FinTech, Payments or another regulated environment.
• Strong organisational skills and attention to detail, able to run several recurring cycles in parallel and meet deadlines.
• Confident coordinating across functions and seniority levels, including remotely, and comfortable chasing stakeholders for information.
• Excellent written and verbal communication in English, including preparing clear risk reports and presentations.

Required skills

• Working knowledge of risk registers, risk reporting and control documentation.
• Proficiency in Excel and PowerPoint.
• Hands-on experience with or support of GRC tools is a strong advantage.
• Practical working knowledge of business continuity and resilience concepts (business impact analysis, recovery objectives, continuity planning and testing) is an advantage.
• Awareness of regulatory expectations for operational resilience; familiarity with CBUAE requirements or an equivalent regime is an advantage.