Risk & Controls Analyst

Centrapay

New Zealand

On-site

NZD 120,000 - 170,000

Full time

14 days+

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Benefits offered by this job

Flexible working

Office in Auckland

6 weeks annual leave

MacBook Pro

Sick leave from day one

Free health insurance

Free Life insurance

Parental leave entitlements

Job summary

Centrapay is building a payments platform in New Zealand and Australia. We are seeking a sharp risk professional to design controls, investigate anomalies, and improve reporting across a rapid fintech environment.

You’ll work with engineering, product, operations and leadership to translate technical information into meaningful risk insights, reporting to the CRO and collaborating with the Senior Risk & Change Manager.

Qualifications

5+ years in risk management, information security, or technology risk.
Experience in financial services or a regulated fintech environment.
Ability to work across technical and non-technical teams, translating technical concepts into language others understand.
Strong analytical and problem-solving skills.
Ability to spot patterns and inconsistencies in data.
Process improvement mindset.
Excellent communication skills.
Payments experience is not required — we'll help you learn.

Responsibilities

Design and test controls to close risk gaps and improve reporting.
Investigate anomalies, trends and gaps in data; translate into risk insights.
Collaborate with engineering, product, operations and leadership.
Lead control remediation and periodic testing cycles.
Maintain evidence and documentation for compliance activities.

Skills

Risk management

Information security

Technology risk

Analytical skills

Problem solving

Data analysis

Communication skills

Education

Relevant degree or certification in risk/audit/infosec

Tools

GRC platforms

Job description

Description

At Centrapay, we're revolutionising how you spend money both in-store and online. We allowbusinesses to create digital assets and loyalty programmes so that you can spend and be rewarded anywhere. Some of our partners include Coca-Cola, BNZ, and Farmlands, and we process payments in New Zealand and Australia.

Our payments platform is the heartbeat of what we do. On top of this, we're building our hero app, Payap (www.payap.com ), that brings all of our best capabilities to life.

At Centrapay we're building a payments platform that businesses and consumers trust, and we want a sharp, curious risk professional to help us do it right. This is a hands‑on role where your work will actually matter: you'll design controls, investigate anomalies, improve reporting, and influence how risk is managed across the whole business.

What you'll be doing

This isn’t a role where you’ll spend your day ticking boxes or following rigid processes. We’re looking for someone who can think critically, ask good questions, investigate issues and help us continuously improve how we manage risk in a proportionate way as the business grows.

You’ll work closely with engineering, product, operations and leadership teams, translating technical and operational information into meaningful risk and control insights. You’ll report to the CRO, also working closely with the Senior Risk & Change Manager.

Controls & Assurance

Support the ongoing development of Centrapay / Payap’s control framework
Design and test controls to close risk gaps
Build practical assurance approaches for a fast-moving fintech
Lead control remediation and periodic testing cycles
Maintain evidence and documentation for compliance activities

Reporting & Data

Prepare risk, controls and compliance reporting
Investigate anomalies, trends and gaps in data
Support regulatory and governance reporting requirements
Drive automation across assurance and measurement

Compliance & Accreditation

Support audits, accreditations and compliance programmes
Coordinate evidence collection across teams
Maintain compliance registers, databases and records

Infosec & Third-Party Risk

Support security risk assessments for systems and vendors
Track vulnerability management and remediation
Facilitate risk workshops and maintain risk records

What Success Looks Like

Established a repeatable controls testing approach the business actually use
Improved the quality and efficiency of risk and compliance reporting
Increased automation across assurance and testing activities
Built trusted relationships across engineering, product and operations
Become a go-to source of insight for the Risk function and leadership

Requirements

Who We're Looking For

5+ years in risk management, information security, or technology risk
Experience in financial services or a regulated fintech environment
Ability to work across technical and non-technical teams, translating technical concepts into language others understand
Strong analytical and problem-solving skills
Ability to spot patterns and inconsistencies in data
Process improvement mindset
Excellent communication skills
Payments experience is not required — we'll help you learn

Nice To Have (not essential)

Experience with ISO 27001, NIST CSF or similar risk frameworks
Exposure to GRC or ISMS platforms
Familiarity with PCI DSS, CPS 234 or open banking/CDR compliance environments
Relevant degree or certification in risk, audit, information security or a related field (e.g. CISA, CRISC)

Why Join Us?

Be part of a fast-growing fintech shaping the future of payments
Work with a team that values innovation, collaboration and ambition
Competitive compensation, growth opportunities, and a chance to make a real impact

Benefits

We look after our people at Centrapay, a key focus is our culture and ensuring we create a positive and healthy work environment. We continuously look at ways to make improvements and regularly ask for employee feedback and input.

Your key benefits