Risk & Controls Analyst at Centrapay

Apply for Risk & Controls Analyst at Centrapay in Wellington City, NZ. This full‑time, on‑site position offers great opportunities for career growth. Responsibilities What you will be doing: The role is hands‑on and requires you to think critically, ask good questions, investigate issues, and continuously improve how risk is managed in proportion to the business’s growth. You will work closely with engineering, product, operations and leadership teams, translating technical and operational information into meaningful risk and control insights. Your main duties include: Design and test controls to close risk gaps Lead control remediation and periodic testing cycles Maintain evidence and documentation for compliance activities Prepare risk, controls and compliance reporting Investigate anomalies, trends and gaps in data Support regulatory and governance reporting requirements Drive automation across assurance and measurement activities Support audits, accreditations and compliance programmes Coordinate evidence collection across teams Maintain compliance registers, databases and records Support security risk assessments for systems and vendors Track vulnerability management and remediation Facilitate risk workshops and maintain risk records Success Metrics Established a repeatable controls testing approach the business actually uses Improved the quality and efficiency of risk and compliance reporting Increased automation across assurance and testing activities Built trusted relationships across engineering, product and operations Become a go‑to source of insight for the Risk function and leadership Qualifications 5+ years in risk management, information security or technology risk Experience in financial services or a regulated fintech environment Ability to work across technical and non‑technical teams, translating technical concepts into language others understand Strong analytical and problem‑solving skills Ability to spot patterns and inconsistencies in data Process improvement mindset Excellent communication skills Payments experience is not required — we’ll help you learn Relevant degree or certification in risk, audit, information security or a related field (e.g. CISA, CRISC) Nice to Have Experience with ISO 27001, NIST CSF or similar risk frameworks Exposure to GRC or ISMS platforms Familiarity with PCI DSS, CPS 234 or open banking/CDR compliance environments Benefits Competitive compensation and growth opportunities Flexibility: we offer flexible working 6 weeks annual leave MacBook Pro provided We look after our people: a positive and healthy work environment with regular feedback and input In‑person and online social activities to keep you connected Sick leave from day one Free health insurance via Southern Cross Free life insurance Additional parental leave entitlements #J-18808-Ljbffr