Risk & Controls Analyst

About Centrapay

Centrapay is reshaping the way people pay and get rewarded in physical and digital channels. The company enables businesses to launch digital assets and loyalty experiences so customers can spend and earn rewards wherever they are. Its platform supports payment processing in New Zealand and Australia, with partners that include Coca-Cola, BNZ, and Farmlands. Centrapay is also developing Payap, its flagship app, to showcase the full strength of the platform.

Role Overview

Centrapay is seeking a thoughtful and inquisitive Risk & Controls Analyst to strengthen trust in its payments platform and broader business operations. This is a practical, hands-on position focused on building controls, identifying irregularities, improving reporting, and shaping how risk is managed as the company expands. You will collaborate with engineering, product, operations, and senior leaders to turn technical and operational information into clear risk insights, and you will report to the CRO while working closely with the Senior Risk & Change Manager.

Controls and Assurance

• Help develop and mature the control framework across Centrapay and Payap.
• Create and evaluate controls that address identified risk gaps.
• Build assurance methods suited to a fast-moving fintech environment.
• Own remediation follow-up and regular control testing cycles.
• Keep supporting evidence and compliance documentation current and well organised.

Reporting and Data Analysis

• Produce reporting for risk, controls, and compliance matters.
• Examine anomalies, trends, and inconsistencies in data.
• Support governance and regulatory reporting obligations.
• Help increase automation in assurance and measurement activities.

Compliance, Audit, and Accreditation

• Assist with audits, accreditations, and wider compliance programmes.
• Coordinate evidence gathering with teams across the business.
• Maintain registers, records, and databases used for compliance tracking.

Information Security and Third-Party Risk

• Support security risk reviews for systems and external vendors.
• Monitor vulnerability management activity and remediation progress.
• Run or support risk workshops and keep risk documentation up to date.

What Success Looks Like

• A practical and repeatable control-testing process is in place and used by the business.
• Risk and compliance reporting is clearer, more efficient, and higher quality.
• Assurance and testing work has become more automated.
• Strong working relationships have been built with engineering, product, and operations.
• You become a trusted source of insight for the risk team and leadership.

Requirements

• At least 5 years of experience in risk management, information security, or technology risk.
• Background in financial services or within a regulated fintech setting.
• Ability to work across technical and non-technical stakeholders and explain complex ideas in plain language.
• Strong analytical thinking and problem-solving capability.
• Good at noticing patterns, gaps, and inconsistencies in data.
• A mindset focused on improving processes and finding better ways of working.
• Strong written and verbal communication skills.
• Payments experience is helpful but not mandatory, as training will be provided.

Nice to Have

• Exposure to frameworks such as ISO 27001, NIST CSF, or similar approaches.
• Experience using GRC or ISMS platforms.
• Familiarity with PCI DSS, CPS 234, or open banking/CDR compliance environments.
• A relevant degree or certification in risk, audit, information security, or a related discipline, such as CISA or CRISC.

Why Join Centrapay

• Join a fast-growing fintech helping shape the future of payments.
• Work with a team that values innovation, collaboration, and ambition.
• Receive competitive pay, development opportunities, and the chance to have meaningful impact.

Benefits

• Flexible work arrangements.
• Office based at City Works Depot in Auckland, if you are local.
• 6 weeks of annual leave.
• MacBook Pro provided.
• Open, down-to-earth culture with a strong focus on inclusion.
• Both in-person and virtual social activities.
• Sick leave available from day one.
• Free Southern Cross health insurance.
• Free life insurance.
• Additional parental leave support.

Additional Information

Centrapay encourages feedback from employees and is committed to continuously improving its workplace and culture. The company is also partnering with BNZ to drive payment innovation and expand what is possible in the payments space.