Risk & Controls Analyst

Role overview

Centrapay is a payments company focused on helping people spend and be rewarded in-store and online through digital assets and loyalty experiences. The platform supports businesses in New Zealand and Australia, and the team is also building Payap, the company’s flagship app that brings its core capabilities together.

The business is looking for a curious and commercially minded risk professional to strengthen controls and support the maturity of its risk practices. This is a practical, hands-on position where you will shape control design, look into unusual findings, improve reporting, and influence how risk is handled across the organisation.

You will work with engineering, product, operations, and senior leaders, turning technical and operational detail into clear risk and control insight. The role reports to the CRO and works closely with the Senior Risk & Change Manager.

Controls and assurance

• Contribute to the ongoing build-out of the control framework for Centrapay and Payap.
• Create and evaluate controls that address identified risk weaknesses.
• Develop pragmatic assurance methods suited to a fast-moving fintech environment.
• Run control remediation activities and recurring testing cycles.
• Keep supporting evidence and compliance records organised and up to date.

Reporting and data analysis

• Produce reporting on risk, controls, and compliance matters.
• Examine irregularities, patterns, and data gaps to understand root causes.
• Support governance and regulatory reporting obligations.
• Help automate assurance and measurement activities where possible.

Compliance and accreditation

• Assist with audits, accreditation exercises, and broader compliance programmes.
• Coordinate the gathering of evidence across multiple teams.
• Maintain registers, databases, and other compliance documentation.

Information security and third-party risk

• Support risk assessments for systems, security issues, and external vendors.
• Track vulnerability remediation and follow-up actions.
• Help facilitate risk workshops and maintain accurate risk logs.

What success looks like

• A repeatable controls-testing process that the business actually uses.
• Better quality and more efficient risk and compliance reporting.
• More automation in assurance and testing work.
• Strong working relationships across engineering, product, and operations.
• Recognition as a trusted source of insight for the Risk function and leadership team.

Requirements

To be successful in this role, you should bring at least 5 years of experience in risk management, information security, or technology risk. Background in financial services or a regulated fintech environment is important.

You’ll need to be comfortable working with both technical and non-technical stakeholders, explaining complex topics in plain language. Strong analytical thinking, problem-solving ability, attention to data patterns, a continuous-improvement mindset, and clear communication skills are all essential.

Payments experience is not mandatory, as the team will support your learning.

Nice to have

Experience with frameworks such as ISO 27001 or NIST CSF would be useful, though not required. Familiarity with GRC or ISMS tools, PCI DSS, CPS 234, or open banking/CDR compliance environments is also an advantage.

A relevant qualification or degree in risk, audit, information security, or a related discipline, such as CISA or CRISC, would be beneficial.

Why join Centrapay

You’ll be joining a fast-growing fintech that is helping shape the future of payments. The team values innovation, collaboration, and ambition, and the role offers competitive compensation, growth opportunities, and the chance to make a meaningful impact.

Benefits

Centrapay places a strong focus on culture and on maintaining a healthy, positive work environment. The company regularly seeks employee feedback and uses it to improve the workplace experience.

• Flexible working arrangements.
• City Works Depot office location in Auckland, for those based there.
• Six weeks of annual leave.
• MacBook Pro provided.
• Inclusive, open, and grounded workplace culture.
• Regular in-person and online social activities.
• Sick leave available from the first day.
• Free Southern Cross health insurance.
• Free life insurance.
• Extra parental leave support.

Additional information

Centrapay’s work includes partnership with BNZ to advance payment innovation. The company invites candidates who want to help push the boundaries of what is possible in payments.