Risk & Controls Analyst at Centrapay

Risk & Controls Analyst (Full time, onsite) at Centrapay in Dunedin, NZ. Responsibilities Work closely with engineering, product, operations and leadership teams, translating technical and operational information into meaningful risk and control insights. Report to the CRO and collaborate with the Senior Risk & Change Manager. Support the ongoing development of Centrapay / Payap’s control framework. Design and test controls to close risk gaps. Build practical assurance approaches for a fast‑moving fintech. Lead control remediation and periodic testing cycles. Maintain evidence and documentation for compliance activities. Prepare risk, controls and compliance reporting. Investigate anomalies, trends and gaps in data. Support regulatory and governance reporting requirements. Drive automation across assurance and measurement. Support audits, accreditations and compliance programmes. Coordinate evidence collection across teams. Maintain compliance registers, databases and records. Support security risk assessments for systems and vendors. Track vulnerability management and remediation. Facilitate risk workshops and maintain risk records. Qualifications 5+ years in risk management, information security, or technology risk. Experience in financial services or a regulated fintech environment. Ability to work across technical and non‑technical teams, translating technical concepts into clear language. Strong analytical and problem‑solving skills. Ability to spot patterns and inconsistencies in data. Process improvement mindset. Excellent communication skills. Payments experience is not required — we’ll help you learn. Nice to Have Experience with ISO 27001, NIST CSF or similar risk frameworks. Exposure to GRC or ISMS platforms. Familiarity with PCI DSS, CPS 234 or open banking/CDR compliance environments. Relevant degree or certification in risk, audit, information security or a related field (e.g., CISA, CRISC). Benefits Competitive compensation and growth opportunities. Flexible working. 6 weeks annual leave. A MacBook Pro. Culture that values inclusion and open collaboration. In‑person and online social activities to keep you connected. Sick leave from day one. Free health insurance via Southern Cross. Free life insurance. Additional parental leave entitlements. #J-18808-Ljbffr