Tabby

1 week ago

Vendor Risk Manager

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 6 hours agoStatus: Live

Job Summary

Own Tabby’s end-to-end third-party (vendor) risk program, from initial due diligence and contracting requirements through ongoing monitoring and offboarding. Run financial, security, and risk reviews for critical partners (KYC, fraud, credit bureau, payments, banking, collections), issue risk ratings with conditions, maintain concentration risk registers, and translate control gaps and incident trends for the Risk Committee and Board.

Location: Riyadh

Workplace: Onsite

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Manager level

Key Responsibilities

•Run due diligence on new vendors before contracts are signed, including financial health checks, SOC 2/ISO 27001 review, breach history, and subprocessor mapping.
•Provide risk ratings for prospective vendors with conditions covering KYC, identity verification, fraud detection, credit bureau, payment processing, card issuing, banking, and collections.
•Assess and monitor vendor risk across the active portfolio, using tiered monitoring cadences for critical vendors and tracking control drift, subprocessor changes, and adverse media.
•Partner with Product during new vendor integrations and prepare risk reporting for the Risk Committee and Board translating control gaps and incident trends.
•Manage vendor offboarding and ensure regulatory and contractual exit obligations are met, including data deletion and access revocation for customer-facing services.

Key Requirements

•3–4 years in third-party risk management, vendor risk, or operational risk in a payments, lender, bank, or fintech setting.
•Working knowledge of NIST CSF, ISO 27001, SOC 2, and assessment tools such as SIG or CAIQ.
•Familiarity with vendor-facing regulatory requirements including consumer credit, GDPR/CCPA, PCI-DSS, and operational resilience expectations for critical third parties.
•Ability to negotiate directly with vendors and secure meaningful commitments such as real SLAs and breach/audit terms.
•Full professional proficiency in English (Arabic is a plus).

Experience:Third-party riskVendor riskOperational riskPaymentsFintechLendingBNPLConsumer creditGRC

Skills:CommunicationAnalytical skillsNegotiationInterpersonal skillsRisk translation

Certifications:CTPRPCRISCCISACISM

Languages:EnglishArabic

Tech Stack:NIST CSFISO 27001SOC 2SIGCAIQGDPRCCPAPCI-DSSOneTrustProcessUnityArcherGRC

Company Brief

Tabby

Tabby is a MENA buy‑now‑pay‑later and fintech platform that enables customers to split purchases into installments, offers in‑store and online payment products, a consumer app, and merchant services across Saudi Arabia, UAE, Kuwait and the wider region.

Industry: Lending

Company Size: Enterprise (1,001+ employees)

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series E+

Headquarters: Riyadh, Saudi Arabia

Founded: 2019

Glassdoor: 4.0

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Tabby

1 week ago

Vendor Risk Manager

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 6 hours agoStatus: Live

Job Summary

Location: Riyadh

Workplace: Onsite

Employment Type: Full time

Job Function: Legal, Risk & Compliance

Seniority: Manager level

Key Responsibilities

•Run due diligence on new vendors before contracts are signed, including financial health checks, SOC 2/ISO 27001 review, breach history, and subprocessor mapping.
•Provide risk ratings for prospective vendors with conditions covering KYC, identity verification, fraud detection, credit bureau, payment processing, card issuing, banking, and collections.
•Assess and monitor vendor risk across the active portfolio, using tiered monitoring cadences for critical vendors and tracking control drift, subprocessor changes, and adverse media.
•Partner with Product during new vendor integrations and prepare risk reporting for the Risk Committee and Board translating control gaps and incident trends.
•Manage vendor offboarding and ensure regulatory and contractual exit obligations are met, including data deletion and access revocation for customer-facing services.

Key Requirements

•3–4 years in third-party risk management, vendor risk, or operational risk in a payments, lender, bank, or fintech setting.
•Working knowledge of NIST CSF, ISO 27001, SOC 2, and assessment tools such as SIG or CAIQ.
•Familiarity with vendor-facing regulatory requirements including consumer credit, GDPR/CCPA, PCI-DSS, and operational resilience expectations for critical third parties.
•Ability to negotiate directly with vendors and secure meaningful commitments such as real SLAs and breach/audit terms.
•Full professional proficiency in English (Arabic is a plus).

Experience:Third-party riskVendor riskOperational riskPaymentsFintechLendingBNPLConsumer creditGRC

Skills:CommunicationAnalytical skillsNegotiationInterpersonal skillsRisk translation

Certifications:CTPRPCRISCCISACISM

Languages:EnglishArabic

Tech Stack:NIST CSFISO 27001SOC 2SIGCAIQGDPRCCPAPCI-DSSOneTrustProcessUnityArcherGRC

Company Brief

Tabby

Industry: Lending

Company Size: Enterprise (1,001+ employees)

Growth: Scaleup

Valuation: Unicorn (USD 1B+)

Funding: Series E+

Headquarters: Riyadh, Saudi Arabia

Founded: 2019

Glassdoor: 4.0

Website LinkedIn Glassdoor