Summary
ClearGrid is a technology company using AI and analytics for debt resolution and recovery. Based in Dubai, the Head of Risk & Compliance will build and own the compliance framework across its products, covering UAE and Saudi regulatory obligations, consumer protection, data protection, financial crime and operational risk. The role leads client due diligence, audit responses, control testing and AI governance, and serves as the registered MLRO and data protection officer. Applicants should have at least six years of relevant financial services, fintech, lending or debt collection experience and direct UAE and/or Saudi regulatory exposure; fluent English is required, with professional Arabic strongly preferred.
The posting
As published on cleargrid.co. Pulled from the employer's site and shown as they wrote it.
Who We Are
ClearGrid is revolutionizing the debt resolution industry with cutting-edge AI and advanced analytics. We leverage real-time data, machine learning, and automation to optimize debt recovery for financial institutions. As we scale our technology platform, we are building high-performance, resilient systems to support our next phase of hyper-growth.
About the Role
We are hiring our first dedicated risk and compliance leader to own the compliance framework across ClearGrid’s full product suite: Command, Allocate, and Securitize.
This is a broad, hands-on generalist mandate. You will set the policies, build the controls, and be the single point of accountability for how we meet our regulatory and contractual obligations across the UAE and Saudi Arabia. You will work directly with the CEO, and partner daily with Legal, Finance, Product, Engineering, and Operations.
You will be the person our bank and lender clients speak to when they want assurance, and the person our internal teams come to before shipping something that touches regulated activity. It suits someone who is comfortable owning a function end to end, and who would rather build the framework than inherit one. You start as the sole owner of the function; you will hire and shape the team as the function scales and act as our registered MLRO and data protection officer.
Your First 90 Days
Map our licensing and registration position in both markets and close any gaps
Stand up the operational risk register and the first control testing calendar
Close out the open items on our most active client due diligence and audit responses
Set the baseline collections conduct and complaint handling standards across all channels
What You’ll Own
Compliance framework. Design, write, and maintain the policies, standards, and control sets covering all three product lines. Keep them current as regulation, products, and client requirements change.
Regulatory obligations across UAE and KSA. Track and interpret CBUAE and SAMA requirements relevant to lending, collections, outsourced servicing, and consumer credit. Own licensing and registration obligations, regulatory notifications, and responses to regulator queries.
Client and partner assurance. Lead compliance due diligence with banks, lenders, and funding partners. Own questionnaires, audit responses, evidence packs, and contractual compliance obligations, including reporting commitments and remediation of audit findings.
Consumer protection and conduct. Set collections conduct standards and fair treatment principles. Own complaint handling, contact conduct rules, quality monitoring of customer communications, and outcome testing across voice, chat, and messaging channels.
Data protection. Own compliance with the UAE PDPL and the KSA PDPL (SDAIA) across the platform. Cover data handling and retention, DPAs, sub-processor and vendor reviews, cross-border transfer mechanisms, and breach response.
Financial crime. Own AML, CFT, and sanctions obligations relevant to servicing and funding flows. Cover counterparty KYC and KYB, screening controls, escalation routes, and suspicious activity reporting where applicable.
Risk register and control testing. Build and run the operational risk register. Set and execute the control testing calendar, manage incident and breach handling, and track remediation to closure.
Structured funding compliance. Support Securitize with portfolio eligibility criteria, covenant monitoring, investor and lender reporting obligations, and SPV governance requirements.
AI and automated decisioning governance. Set the controls around automated decisioning and AI-generated customer communications, including review workflows, audit trails, explainability, and human oversight requirements.
Advisory and enablement. Act as the escalation point for compliance questions across the business. Train commercial, product, and operations teams so that compliance is built into how we work rather than checked at the end.
What You’ll Bring
Non-negotiable
6+ years in risk and compliance within financial services, fintech, lending, or debt collection, with direct UAE and/or KSA regulatory exposure
Working knowledge of CBUAE and SAMA regulations relevant to lending, collections, consumer protection, and outsourcing arrangements
Track record of writing policies, building risk registers, and running control testing programs from scratch rather than administering existing ones
Experience leading client due diligence, external audits, and regulator correspondence in a financial institution or a vendor serving them
Fluent English; professional Arabic strongly preferred
Comfortable operating as the sole owner of the function, hands-on across strategy and execution
Strong plus
Practical experience with AML, CFT, sanctions screening, and KYC/KYB frameworks
Applied knowledge of UAE and KSA data protection law, DPAs, and cross-border data transfer requirements
Experience designing complaint handling and fair treatment frameworks for consumer-facing operations
Exposure to receivables funding, securitization, or structured finance compliance
Familiarity with governance of AI or automated decisioning systems
Professional certification such as ICA, ACAMS, or CISI