Lead Anti-Fraud Officer

The Lead Anti-Fraud Officer independently leads complex governance, risk, and compliance activities and serves as a subject matter expert in one or more GRC domains — enterprise information security governance, risk management frameworks, regulatory compliance, or third-party risk management. The role produces high-quality GRC deliverables, provides technical mentoring to junior and mid-level team members, and contributes directly to the continuous improvement of the organization’s GRC framework, risk treatment processes, and compliance reporting mechanisms.

Department:
Risk B2C

Employment Type:

Full Time

Location:

KSA

• Lead the development, review, and continuous improvement of information security policies, standards, procedures, and governance frameworks.
• Serve as the subject matter expert for assigned regulatory domains, providing authoritative interpretation of requirements and translating them into implementable control objectives.
• Monitor and proactively track regulatory and legal developments affecting information security — assessing impact and recommending updates to the governance framework.
• Prepare and review governance documentation — RACI matrices, security charter updates, governance committee packs — and present findings to senior stakeholders.
• Lead the preparation of regulatory self‑assessments and compliance attestations, coordinating evidence gathering and quality‑reviewing submissions before senior sign‑off.
• Mentor GR1–GR2 team members on governance documentation quality, regulatory interpretation, and risk assessment methodology.

• Lead the execution of complex enterprise information security risk assessments, applying advanced qualitative and quantitative methodologies to produce risk profiles aligned with the organization’s risk appetite.
• Own and maintain the enterprise information security risk register — ensuring accuracy, currency, and appropriate escalation of significant risks.
• Lead BIA processes for critical business functions — coordinating with asset owners, analysing recovery requirements, and producing BIA outputs for Business Continuity and Disaster Recovery planning.
• Design and execute control effectiveness testing programmes, producing findings reports with gap analysis and risk‑ranked remediation recommendations.
• Lead third‑party information security risk management — designing assessment frameworks, conducting in‑depth vendor reviews, and maintaining the third‑party risk register.
• Produce executive‑quality risk reporting with trend analysis, emerging risk identification, and treatment progress tracking for senior management and committee consumption.

• Lead compliance monitoring activities for CFFR, NCA ECC, PDPL, ISO 27001, and PCI‑DS — producing gap analyses, treatment plans, and periodic compliance status reports.
• Manage internal and external audit cycles — coordinating evidence collection, reviewing evidence quality, engaging with auditors, and tracking remediation to closure.
• Design and deliver the security awareness programme — producing targeted content for different staff segments, conducting awareness sessions, and analysing effectiveness metrics.
• Develop and maintain GRC programme metrics dashboards, ensuring KPIs and KRIs are accurately measured and presented to senior management on schedule.
• Lead the integration of information security requirements into third‑party contracts, procurement processes, and major project onboarding.
• Contribute to the development of the information security programme strategy, identifying capability improvement opportunities and recommending investment priorities to the Lead.

• Serve as the primary GRC point…