Risk Analyst (Operations & Technology) at Bank of New Zealand

Auckland, Auckland, New Zealand -

Full Time

Start Date

Immediate

Expiry Date

12 Aug, 26

Salary

0.0

Posted On

14 May, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Risk Management, Information Security, ISO 27001, Control Implementation, Security Risk Assessments, Vulnerability Scanning, Penetration Testing, Incident Response, Compliance Reporting, GRC, ISMS, Audit Management

Industry

Banking

Description

Worker Type: Permanent Here at BNZ, it's about more than just banking. We work together in an agile, energising environment to create innovative solutions through our promise "If you can imagine a better future, let's find a way." We support wellbeing, flexible working and have a generous leave offering. There is the opportunity for growth, learning and career development. No two days are the same. BlinkPay is an entity of the BNZ Group About BlinkPay Looking for an exciting opportunity to join a fast-growing team that is dedicated to making a difference in the payment industry? BlinkPay is seeking top-notch talent to join our team of payments experts as we continue to innovate and develop cutting-edge payment solutions for our clients. With our customer-centric approach and state-of-the-art technology, BlinkPay is committed to providing secure, reliable, and efficient payment services to our customers. Position Overview As a Risk Analyst at BlinkPay, you will report to both the internal CTO and CRO, and be responsible for helping manage risk across the organisation whilst maintaining our security posture. This is a hands-on role where you will proactively identify and assess risks across product development and operations processes as we scale, design and implement controls, coordinate security operations, lead audit engagements, maintain our ISO 27001 certification and complete regular risk reporting for risk committees. The ideal candidate is proactive and eager to learn in a dynamic environment, who can navigate the compliance requirements of a regulated banking environment, and brings practical experience in risk management, control implementation, and information security operations. Role Responsibilities Risk Management and Control Implementation Identify, assess, and manage product, technology and operational risks across the organisation Design and implement new controls to address risk gaps, execute control remediation plans, and perform periodic control testing Maintain the enterprise risk register and track control improvements, providing evidence for audit and risk action closure Work with business owners across operations, sales and product to embed effective risk management practices Complete regular risk reporting for internal risk meetings and board forums Information Security Operations Own and maintain BlinkPay's ISO 27001 certification, manage the ISMS, and serve as primary contact during external audits Conduct security risk assessments for systems, integrations, new initiatives, and third-party vendors Coordinate vulnerability scans and penetration testing, interpret findings, and drive remediation Oversee incident response activities and ensure appropriate security measures are in place Compliance and Reporting Prepare and deliver risk dashboards, key risk indicators, and compliance reporting to internal and external stakeholders Maintain governance documentation and ensure all evidence is audit-ready Work cross-functionally with technology, product, and business teams to embed effective security and risk practices Required Experience 5+ years in risk management, information security, or technology risk roles within financial services or fintech Ideal but not required, hands-on experience with ISO 27001 implementation and maintenance Awareness of or desire to learn risk management methodologies, IT general controls, and operational risk frameworks (ISO 27001, NIST CSF, or similar) Ability to interpret technical security findings and excellent communication skills for cross-functional stakeholder engagement Qualifications That Would Strengthen Your Application ISO 27001 Lead Auditor or Lead Implementer certification Experience with CPS 234 or PCI DSS compliance, particularly in payments or fintech environments Experience with GRC or ISMS automation platforms Relevant degree in information security, risk management, computer science, or related field CISSP, CISM, CISA, or CRISC certification is a plus What We Offer Competitive compensation package with benefits Professional development opportunities 100% work from home role Health insurance coverage Regular team events and activities Important Note BlinkPay values genuine lived experience and reserves the right to decline applications suspected of being AI-generated. All applications should reflect genuine experience and qualifications. BlinkPay is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. This is an exciting opportunity to join us! We're bold thinkers who are taking brave steps to create a company that people want to work for, and customers want to bank with. If you're ready to join a fun organisation where we are proud of our culture and how we are helping New Zealander's to 'Find their way', then show your interest by submitting your application - we can't wait to read it. Ehara taku toa i te toa takitahi, engari he toa takitini" - Success is not the work of an individual, but the work of many.” Closing Date: 31 May 2026 Applications will be reviewed regularly across the advertising period, but we do reserve the right to close applications early. Welcome to BNZ Careers! We are excited for you to apply for a role with us. We're the bank for New Zealand. Our purpose is to serve customers well and help our communities prosper. Every day we find ways for our customers, our people, and our communities to thrive through strong values, diverse teams, and great people - just like you.

Responsibilities

The role involves identifying and managing product, technology, and operational risks while maintaining the organization's security posture. Key duties include managing ISO 27001 certification, designing risk controls, and delivering risk reporting to board forums.