BALFIN Group is one of the most successful investment groups in the Western Balkans. Established in 1993, the Group today operates across Austria, Albania, Kosovo, Bosnia and Herzegovina, Croatia, North Macedonia, Switzerland, Montenegro, the Netherlands, Canada, and the United States of America.
Its diversified portfolio spans multiple sectors, including banking, real estate development, wholesale and retail, asset management, tourism, logistics, education, and entertainment.
With a workforce of approximately 5,500 professionals, BALFIN Group continues to grow steadily, guided by strong business ethics, financial stability, innovation, and a long-term commitment to community impact through Mane Foundation.
Happy Pay Sha is BALFIN Group’s fintech platform, offering regulated digital financial services in Albania. Established in 2020, Happy has evolved beyond loyalty programs to offer integrated electronic payment processing, digital wallet services, Buy Now Pay Later (BNPL) credit solutions, and the issuance of electronic money. Serving both individuals and businesses, its mobile app and integrated POS/kiosk systems support, secure and flexible payment solutions – creating a full digital transaction ecosystem. Licensed under Albanian financial regulations, Happy Pay will uphold high standards of security, compliance, and user experience and lead Albania’s digital finance transformation with innovation and smart commerce solutions.
Job Position: Risk and Analytics Officer
Reporting: Risk Manager
Location: Tirana
Band position: 3T – Proffesional
Overview of the Role
The Risk and Analytics Officer is responsible for developing, implementing, and maintaining the institution’s integrated risk management framework across wallet operations, payment services, and BNPL/retail financing activities. The role ensures ongoing identification, assessment, mitigation, and reporting of operational, fraud, credit, liquidity, cybersecurity, and compliance risks, while providing analytical insights for strategic decision‑making.
Main Responsibilities
A. Enterprise Risk Management
• Develop and maintain the Integrated Risk Management Framework aligned with regulatory requirements.
• Define the Risk Appetite Statement, risk indicators, and performance thresholds.
• Execute risk identification, assessment, and monitoring across all business lines.
• Maintain and update the institution’s Risk Register.
B. Operational Risk Management – Wallet & Payments
• Evaluate end-to-end wallet processes including onboarding, KYC, transactions, settlements, and reconciliation.
• Monitor operational incidents, failures, and control effectiveness.
• Conduct risk assessments for new products, system enhancements, and process changes.
C. Credit Risk Management – BNPL
• Develop and maintain scoring models, affordability calculations, and risk-based pricing.
• Monitor BNPL portfolio performance: DPD buckets, roll rates, NPL, expected loss.
• Conduct stress testing and portfolio forecasting.
• Recommend strategies to optimize approval rates while controlling losses.
D. ICT, Cybersecurity & Outsourcing Risk
• Assess risks from IT systems, cloud infrastructure, APIs, and outsourced providers.
• Support implementation of business continuity and disaster recovery plans.
• Conduct outsourcing due diligence and performance evaluations.
E. Analytics, Insights & Reporting
• Develop MIS dashboards for wallet activity, fraud indicators, and portfolio quality.
• Analyze customer behavior, repayment patterns, and product profitability.
• • Provide data-driven recommendations to management
1. Key Deliverables
• Monthly Risk Dashboard (Payments + BNPL + fraud)
• Quarterly Enterprise Risk Assessment
• BNPL Portfolio Quality Reports (DPD, NPL, roll rates, EL)
• Operational and fraud incident investigation reports
• Outsourcing and ICT Risk Assessments
• Annual stress-testing and BCP/DR reports
• Updated Risk Appetite & KRIs
2. Required Qualifications
Education
• Bachelor’s or Master’s degree in Finance, Risk Management, Economics, Data Science, or related field.
Experience
• 4–7 years in Risk Management, Analytics, Fraud Monitoring, or Credit Risk within fintech, IPE/EMI, BNPL, banking, or microfinance.
• Experience with analytical tools (Excel Advanced, SQL, Power BI/Tableau preferred).
Technical Skills
• Strong knowledge of operational, credit, fraud, ICT, and outsourcing risk frameworks.
• Experience with credit models, risk-based pricing, and transaction monitoring.
• Strong analytical, communication, and reporting abilities.
• High integrity, independence, and critical thinking.
• Ability to collaborate across teams and influence decision-making.
3. Key Performance Indicators (KPIs)
• Reduction in operational incidents and fraud losses.
• BNPL portfolio health: DPD, NPL, roll rates, expected loss accuracy.
• Timeliness & accuracy of risk reporting.
• Regulatory compliance with minimal findings.
• Effectiveness of implemented risk controls.
• Improved onboarding and transaction fraud detection rates.
What We Offer
• An attractive benefit package, including fair remuneration based on merit and performance evaluation.
• An exceptional opportunity to develop your skills and growth within BALFIN Group.
• Extra Leave days
• Dynamic and collaborative work environment
Application Procedure: To apply for this position, please submit a CV in i.shima@happy.al by 30/01/2026.
*Your personal data (in your capacity as a job candidate) will be processed in accordance with Law no. 124/2024, dated 19/12/2024 “On the Protection of Personal Data,” as well as the Internal Regulation on the Protection of Personal Data (approved by Happy Pay Sha). This applies to the confidentiality and security of personal data. Only selected applicants will be notified about the next stages. The processed data is accessed solely by HAPPY Pay Sha as the employer, specifically by the Human Resources Department.
The data of unsuccessful candidates will be retained for a maximum period of 1 year from the announcement of the successful candidate, for the purpose of contacting them in case of similar job openings matching the applicant’s profile. After 1 year, the data will be irreversibly deleted.
