Operational Risk Senior Specialist

About Us

Nu is one of the largest digital financial platforms in the world, with more than 127 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building.

Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human.

Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page Careers at Nu - Join our team!  

About the Role

Operational Risk & Internal Controls at Nubank 

Our mission is to maintain and constantly improve the operational risk management process in order to ensure a sustainable growth for Nubank. With that in mind, we analyze current risks and identify potential ones that may affect our journey.

As Risk Management Specialist, you will work closely with the Operational Risk Manager to ensure that your roadmap is in line with the business growth at all times, and align global defense strategies with local needs. You will enable the Operational Risk Manager to work effectively with internal and external stakeholders. This is a very strategic role that requires a combination of focus and flexibility, as well as a willingness to roll up your sleeves and play an active role in managing data and present results to different stakeholders.

 Responsibilities:

• Maintain and continuously improve the Business Impact Analysis (BIA) for Nu Colombia.
• Evaluate and maintain the assessment of Critical Roles for Nu Colombia.
• Ensure that the Business Continuity Plan is permanently updated.
• Supervise the different teams that perform the Emergency Management Plan (EMP), the Crisis Management Plan (CMP), and the Disaster Recovery Plan (DRP).
• Coordinate the Crisis Management preparedness annual exercise.
• Ensure that the inventory of critical information assets remains updated and implement strategies for its availability if risk events materialize.
• Consolidate the analysis and report results to management and SFC, as well as other stakeholders.

Qualifications

• Bachelor’s Degree in engineering.
• Business Continuity Management (BCM)  & Third Party Risk Management (5+ years), ideally in regulated industries. Logistics and supply chain or financial sector experience is highly desirable. 
• Analytical and problem solving skills 
• Good communications skills (having the habit of presenting projects to stakeholders of different backgrounds, knowledge and organizational levels will be considered an advantage)
• Time-management and prioritization skills

Location & Work Model

• Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration.

• This position is based in Bogotá, Colombia 

Benefits

• Chance of earning equity at Nu
• Extended maternity and paternity leaves 
• Health and life insurance 
• NuCare - Our mental health and wellness assistance program
• Nucleo - Our learning platform of courses
• NuLanguage - Our language learning program
• Vacations of 15 workdays
• Gym partnership
• Work-from-home Allowance
• Parental Consultancy
• Relocation Assistance Package, if applicable

About Us

Nu is one of the largest digital financial platforms in the world, with more than 127 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building.

Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human.

Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/  

About the role

As an Operational Risk Specialist with global scope, you will own and evolve Nubank’s operational risk framework across all geographies. This is a second line of defense role: you design the methodology, set the standards, and ensure regional teams and first-line stakeholders execute against them consistently. You are not the person running assessments in each market, you are the one defining how they are run everywhere.

Nu’s ongoing international expansion continuously adds new geographies, products, and regulatory contexts to the operational risk landscape. This role is the foundation of our ability to maintain a rigorous, consistent, and scalable op risk framework globally, and to bootstrap it effectively in every new market we enter.

You'll be responsible for

• Owning the global operational risk framework and methodology, setting the standards that local teams follow across all active markets and regulatory contexts.
• Defining and updating methodological guidelines, acting as the reference point for framework interpretation and application across geographies.
• Bootstrapping the op risk framework in new markets as Nu expands internationally, translating global methodology into local regulatory contexts.
• Coordinating with Business Control Officers and 1LoD stakeholders across all geographies to drive RCSA cycles, consolidate results, and provide independent review and challenge.
• Conducting independent oversight of operational risk data, RCSA submissions, and control environments across all BUs and geographies, without formal authority over the teams being assessed.
• Overseeing the identification, classification, and follow-up of operational risk incidents globally, ensuring root causes are investigated and corrective actions tracked to closure.
• Evaluating operational risk implications of new products, features, and processes at a global level, partnering with product and technology teams to integrate risk mitigation from the start.
• Preparing executive and Board-level reports on the global operational risk posture, and supporting regulatory interactions across multiple jurisdictions.

We are looking for a person who has

• Solid experience in Operational Risk Management in the financial services industry, with familiarity with risk frameworks.
• A generalist risk profile: comfortable covering a broad op risk scope across products, technology, and compliance, rather than being narrowly specialized in a single segment.
• Strong second line of defense mindset: able to challenge, govern, and provide independent oversight without owning execution, and comfortable operating without formal authority.
• Exceptional stakeholder management skills: able to align and influence 1LoD teams across multiple geographies, drive methodology adoption, and navigate cultural and regulatory differences.
• Analytical and data-driven: able to synthesize cross-geo risk data, identify patterns and inconsistencies, and translate findings into clear executive communication.
• Self-driven, ownership-oriented, and genuinely motivated to challenge the status quo, you thrive when the playbook doesn't exist yet and don't wait to be told what to improve.
• Advanced English and hands-on experience with AI tools and automations, going beyond basic usage to design workflows or build solutions that reduce manual work at scale.

Location for this opportunity (City, Country)

• São Paulo, Brazil 

Our Benefits

Chance of earning equity at NubankFood/ Meal Card (Vale-Refeição and/or Vale Alimentação)Public Transportation Commuting Benefit (Vale-Transporte)NuCare – Psychological, Financial and Legal Assistance ProgramLife InsuranceMedical PlanDental PlanNuLanguage – Language Course ProgramNucleo - Our learning platform of coursesExtended Parental LeaveDaycare AllowanceParental ConsultancyWork-from-home AllowanceGym Partnerships30 days of paid vacationRelocation Assistance Package, if applicable

Work Model for this Role

Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/ 

Explore how we build technology at Nubank:

🔗 building.nubank.com.br ↗

🎥 youtube.com/@building.nubank ↗

🎧 Listen to our stories on Spotify ↗

About Us

Nu is one of the largest digital financial platforms in the world, with more than 122 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building.

Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human.

Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/ 

About the Team

The Enterprise Risk Management squad sets the global standards for how Nubank identifies, assesses and manages risk across the enterprise – spanning operational, compliance, technology, conduct and other non‑financial risks, and strongly interfacing with financial risk areas (credit, market, liquidity, capital, treasury).

As part of the ERM Methodology Team, you will sit at the intersection of risk, product and platform: shaping global frameworks, embedding them into data and systems, and scaling them with AI‑enabled workflows so that ERM becomes both a competitive advantage and an enabler of safe growth across products, portfolios and geographies. You will be a reference for methodology decisions, influencing senior stakeholders across multiple lines of defense and risk types.

What you'll do

• Own the end‑to‑end design and evolution of ERM methodologies, ensuring coherence across programs and geographies.

• Ensure ERM methodologies connect across risk types (e.g., operational, compliance, technology, conduct, model, financial/credit where relevant) and support a consistent view of the risk profile.

• Translate methodological requirements into GRC platform, product and data specifications, partnering with Platform and engineering teams to build scalable, intuitive workflows.

• Lead the global standardization of global ERM methodologies while enabling smart local adaptations to meet regulatory expectations in each geo.

• Design and drive the integration of ERM programs in new geos, ensuring that new launches start already aligned with group‑level risk standards and governance.

• Define and embed AI/agent use‑cases into ERM workflows (e.g., risk/control suggestions, narrative pre‑population, quality checks), with clear human‑in‑the‑loop governance.

• Use AI and analytics to monitor quality and consistency of methodologies, surfacing insights and opportunities for continuous improvement.

• Partner with risk leaders (financial and non-financial risks), CRO teams, risk stewards and 1LOD to ensure strong adoption and practical usability of ERM frameworks in day‑to‑day decision making.

• Represent ERM methodologies in governance and decision forums.

• Create and refine key risk and performance indicators for ERM programs, enabling better visibility on program effectiveness, maturity and trends.

• Communicate clearly and regularly about ERM methodology initiatives and projects with a wide variety of stakeholders (risk teams in different countries, financial risk functions, internal audit, leadership, product and platform).

What we're looking for (Minimum qualifications)

• Solid experience in Enterprise Risk / Operational Risk / Non‑Financial Risk, with hands‑on ownership of at least one major program or framework (RCSA, control testing, Issue Management, NP&F or equivalent enterprise‑level framework).

• Proven track record as a senior individual contributor leading complex risk initiatives end‑to‑end, from design to rollout, with limited oversight.

• Experience working in multi‑geo or global environments, balancing global standards with local regulatory expectations.

• Strong ability to translate risk methodologies into systems and data (platform requirements, data models, workflow design) in partnership with engineering and product.

• Demonstrated stakeholder management and influence without formal authority, especially across product, risk, compliance and platform/engineering teams.

• Comfort working with data and analytics (e.g., querying datasets, interpreting dashboards, defining metrics) to guide decisions on methodology and program performance.

• Experience defining and tracking metrics, SLAs and KPIs for risk/controls or governance processes.

• Strong written and verbal communication in English, including the ability to explain complex risk concepts to non‑experts.

Nice to Have

• Prior experience in ERM, operational risk, internal controls in financial services or fintech.

• Previous work in designing frameworks, methodologies and governance for risk (financial and/or non‑financial), influencing multiple lines of defense and senior stakeholders across geos.

• Exposure to AI/ML or advanced analytics applied to risk, controls, data quality or governance (e.g., LLMs, anomaly detection, smart suggestions).

• Experience working closely with platform / GRC / risk systems (e.g., JIRA‑based workflows, custom risk platforms, governance tooling).

• Familiarity with regulatory expectations for risks and governance in Brazil and/or other key markets, including reading requirements and translating them into practical frameworks.

• Background in high‑growth tech/fintech environments, navigating the tension between speed, innovation and robust risk management.

Benefits

• Chance of earning equity at Nubank

• Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)

• Public Transportation Commuting Benefit (Vale-Transporte)

• NuCare – Psychological, Financial and Legal Assistance Program

• Life Insurance

• Medical Plan

• Dental Plan

• NuLanguage – Language Course Program

• Nucleo - Our learning platform of courses

• Extended Parental Leave

• Daycare Allowance

• Parental Consultancy

• Work-from-home Allowance

• Gym Partnerships

• 30 days of paid vacation

• Relocation Assistance Package, if applicable

Work Model for this Role

Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/ 

About Us

Nu is one of the largest digital financial platforms in the world, with more than 127 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building.

Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human.

Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/  

About the role

As a Senior Resilience Specialist, you will be the senior owner of two of the most critical resilience programs at Nubank, governing and evolving our Business Continuity and Crisis Management frameworks across all geographies. This is a second line of defense role with global scope: you design the methodology, govern its execution, and ensure regional teams and first-line stakeholders deliver against it. In Crisis Management, you coordinate the institutional response when it matters most, working alongside senior leadership in real time under pressure.

Nu’s ongoing international expansion multiplies the regulatory and operational demands on both programs. This role is the foundation of our ability to scale resilience globally without losing rigor or regulatory credibility.

You'll be responsible for

• Owning the global BCM framework, methodology, and policy, including BIA, OCP, testing standards, ensuring alignment with international frameworks and local regulatory requirements across all active markets.
• Coordinating the annual BCM cycle across all geographies, partnering with 1LoD stakeholders to drive execution, consolidate results, and identify gaps.
• Cascading the global methodology to new markets as Nu expands internationally, adapting to local regulatory contexts while maintaining consistency and rigor.
• Monitoring open BCM issues and action plans globally, escalating critical risks to leadership and ensuring timely remediation.
• Owning the Institutional Crisis Protocol globally, criteria, flows, tooling, and training, keeping it current across all geographies and aligned with organizational changes.
• Monitoring internal and external signals for potential crisis events and leading Pre-Crisis + Crisis coordination end-to-end: Game Plan, stakeholder alignment, and post-event retrospectives.
• Acting as the orchestrator during crisis events, coordinating different teams from Technology, CX, Legal, Compliance, Products and Communications without direct authority, ensuring consistent action and messaging under pressure.
• Reporting crisis program metrics and maturity indicators to leadership, tracking protocol effectiveness and driving continuous improvement.

We are looking for a person who has

• Solid experience in Business Continuity Management and Crisis Management in environments where downtime is not an option, such as financial services, fintechs, or any industry where operational failure has immediate and direct impact on customers.
• Experience coordinating institutional crisis responses: managing multi-stakeholder scenarios under pressure, working directly with senior leadership during high-severity events, and keeping the group focused when the stakes are high.
• Strong second line of defense mindset: able to challenge, govern, and provide oversight without owning execution, and comfortable operating without formal authority over the teams you depend on.
• Analytical profile: ability to read and interpret data in real time, extract what matters, and translate it into clear, actionable insights for executive audiences.
• Exceptional stakeholder management skills: able to align and influence teams from multiple functions across geographies, de-escalate tension, and drive decisions in ambiguous situations.
• Self-driven and ownership-oriented: you take full accountability for your programs, don't wait to be told what to improve, and thrive in fast-paced, cross-functional environments.
• A genuine drive to challenge the status quo — not satisfied with 'we've always done it this way' and always looking for better approaches.
• Hands-on experience building AI-powered tools and automations, someone who goes beyond using AI to actually designing workflows, agents, or portals that reduce manual work at scale.
• Advanced English: you will operate daily in English with stakeholders across all geographies, present to global leadership, and represent Nu to international regulators.
• Clear and concise communication at executive level, both written and oral. You can take a complex risk situation and explain what matters and what needs to happen in two paragraphs.

Location for this opportunity (City, Country)

• São Paulo, Brazil 

Our Benefits

Chance of earning equity at NubankFood/ Meal Card (Vale-Refeição and/or Vale Alimentação)Public Transportation Commuting Benefit (Vale-Transporte)NuCare – Psychological, Financial and Legal Assistance ProgramLife InsuranceMedical PlanDental PlanNuLanguage – Language Course ProgramNucleo - Our learning platform of coursesExtended Parental LeaveDaycare AllowanceParental ConsultancyWork-from-home AllowanceGym Partnerships30 days of paid vacationRelocation Assistance Package, if applicable

Work Model for this Role

Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/ 

Explore how we build technology at Nubank:

🔗 building.nubank.com.br ↗

🎥 youtube.com/@building.nubank ↗

🎧 Listen to our stories on Spotify ↗

About Us

Nu is one of the largest digital financial platforms in the world, with more than 122 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building.

Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human.

Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/ 

About the team

Be part of the SOx Team, contributing to continuous improvements in the IT General Controls (ITGC), Automated and IT-dependent controls environment at Nubank. The team ensures compliance with SOx requirements and international frameworks (e.g., COSO, COBIT, PCAOB standards), partnering with Engineering, Information Security, IAM, Platform, Data, Controllership, Finance, and Product squads to guarantee that technology processes and components supporting financial reporting are properly designed, operated, and evidenced.

We act as 2nd Line of Defense for SOx, challenging and supporting 1LoD teams in the correct and efficient execution of internal controls in line with Nubank’s Internal Controls and SOx IT Methodology.

About the role

As a SOx IT Specialist, you will be a senior individual contributor and subject-matter expert for IT controls over financial reporting, with strong autonomy and influence across multiple domains and countries.You will:

• Own and lead the assessment of the company’s SOx IT control environment, focusing on Logical access management, Change management, IT operations, automated controls, IT-dependent manual controls, and cybersecurity.

• Drive scoping and risk assessment of IT components (third‑party applications, internal services/microservices, automations, infrastructure, datasets, notebooks, etc.) that are relevant to ICFR, applying Nubank’s SOx IT scope methodology.

• Perform and review walkthroughs and design assessments for ITGCs, IT-dependent controls, automatic controls, challenging control design, coverage of risks, and evidence quality.

• Plan and execute Tests of Design (ToD) and Tests of Effectiveness (ToE) for IT controls.

• Coordinate remediation and action plans with Engineering, InfoSec, IAM, and business teams, ensuring robust root-cause analysis, sustainable fixes, and timely closure of IT control deficiencies and audit findings.

• Act as primary counterpart for external auditors and Internal Audit on SOx IT topics (scope, methodology, sampling, exceptions, deficiencies), supporting walkthroughs, evidence requests, and technical discussions.

• Contribute to the continuous improvement of SOx IT methodology, templates, and guidelines (e.g., sampling, population completeness, IPE standards, quality review checklists).

• Help design and challenge IT control automation and monitoring (e.g., control bots/Controlinhos, dashboards, alerts) to increase coverage and reduce manual effort and error risk.

• Mentor and support junior analysts on ITGC concepts, testing techniques, documentation standards, and interaction with tech squads, raising the overall quality bar of the team.

• Promote synergy and governance between SOx, Engineering, InfoSec, IAM, Controllership, and other stakeholders through routines, trainings, workshops, and forums focused on IT controls.

Basic Qualifications

• 6+ years of experience in IT Audit, IT Risk, IT Compliance, or SOx IT (e.g., Big 4, internal audit, financial institutions, fintechs, or tech companies).

• Solid knowledge of SOx 404, PCAOB standards, COSO, and main IT control frameworks (e.g., COBIT, NIST), especially as they relate to ICFR.

• Proven hands-on experience with IT General Controls over:

• Logical access (IAM, SSO/IdP, SoD, privileged access, user lifecycle);

• Change management (code review, approvals, segregation of duties, emergency changes);

• IT operations (job processing, interfaces, monitoring, incident/problem management).

• Experience assessing IT controls in cloud and modern architectures (e.g., AWS, microservices, APIs, data platforms, CI/CD pipelines).

• Experience with enterprise/SaaS applications relevant to financial reporting (e.g., ERP such as SAP/Oracle, HR/Payroll, Treasury, core banking/ledger, reconciliation tools).

• Experience evaluating SOC 1 Type 2 reports, complementary user entity controls, and their impact on SOx.

• Strong ability to analyze technical evidence (logs, configurations, scripts, SQL/queries, access listings) and connect it to control objectives and financial risks.

• Excellent skills in structuring and documenting workpapers (narratives, flowcharts, RCMs, ToD/ToE, conclusions) in English.

• Fluent English (written and spoken), able to lead discussions and defend positions with external auditors and global stakeholders.

• Strong communication and organizational skills, and the ability to work independently.

Preferred Qualifications

• Experience working in multicultural teams across different countries and time zones.

• Previous experience in digital bank, fintech, or technology‑driven environments, with exposure to microservices, event‑driven architectures, and DevOps practices.

• Hands-on experience with identity and access management tools (e.g., Okta or similar), cloud platforms (e.g., AWS), and version control/CI-CD tools (e.g., GitHub, pipelines).

• Experience with process and control improvement, including automation, use of data/analytics for testing, or control monitoring solutions.

• Comfort in reading, interpreting, and analyzing data (e.g., SQL, notebooks, dashboards) to support control testing and investigations.

• Previous experience in Big 4 and/or regulated financial institutions.

• Knowledge of business operational processes.
  

Benefits

• Chance of earning equity at Nubank

• Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)

• Public Transportation Commuting Benefit (Vale-Transporte)

• NuCare – Psychological, Financial and Legal Assistance Program

• Life Insurance

• Medical Plan

• Dental Plan

• NuLanguage – Language Course Program

• Nucleo - Our learning platform of courses

• Extended Parental Leave

• Daycare Allowance

• Parental Consultancy

• Work-from-home Allowance

• Gym Partnerships

• 30 days of paid vacation

• Relocation Assistance Package, if applicable

Work Model for this Role

Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/ 

About Us

Nu is one of the largest digital financial platforms in the world, with more than 127 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building.

Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human.Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/ 

About the role

Strategic and regulatory, centered on the design and strengthening of the Technology Risk framework, and on overseeing its implementation through the Technology Risk area and the business areas, ensuring comprehensive, forward-looking management aligned with regulation and the company’s strategy.

Supports the oversight and development of the Technology Risk function, defining frameworks, metrics, and guidelines, and supervising the proper management of risks arising from systems, data, infrastructure, and technology third parties. Acts as the main point of contact with governing bodies and regulators on IT Risk matters, coordinates the response to major incidents and technology crises, and helps execute tests, assessments, and monitoring of the technology environment.

You'll be responsible for

• Define, update, and oversee the Technology Risk framework, including policies, standards, methodologies, and assessment and reporting criteria.
• Establish, update, and monitor technology risk metrics (KRIs, RAS), consolidating the view of exposure and trends for governing bodies.
• Lead the preparation of regulatory reports and presentations to committees and governing bodies on Technology and Cybersecurity Risk.
• Prepare responses and coordinate attention to regulatory and audit requests related to Technology Risk, interacting directly with those authorities when appropriate.
• Oversee the management of high-materiality technology and cybersecurity incidents, including proper classification, root-cause analysis, and definition of corrective actions.
• Oversee the execution of institutional crisis protocols associated with technology and cybersecurity incidents, facilitating pre-crisis reports, internal communications, and coordination with key areas.
• Support the first line in defining and updating disaster recovery plans (DRP) and in their testing, playing a second-line review and challenge role on the adequacy of technology controls and recovery capabilities.
• Participate in the execution of the BIA, reviewing and challenging the technology dependencies identified by the first line, ensuring they adequately reflect criticality and exposure to Technology Risk.
• Collaborate with senior colleagues and technical areas to determine the root cause of material technology gaps and agree on remediation plans and control-strengthening actions.
• Provide guidance and challenge technology risk assessments for new products, features, and architectures, ensuring consistency and completeness.
• Design and maintain IT Third-Party Risk frameworks, aligned with institutional standards and regulatory requirements.
• Oversee the quality and consistency of IT and cybersecurity control testing, technology RCSAs, and incident monitoring.
• Act as a key advisor to the leadership of Risk, Engineering, Security, Data, and other areas, fostering a strong culture of Technology Risk management.
• Stay up to date on regulation, technology trends, emerging threats, and industry best practices, incorporating these learnings into the evolution of the Technology Risk framework.

We are looking for a person who has

• Minimum of 5 years of experience in cybersecurity or IT Risk Management.
• Bachelors’ degree in Engineering, Computer Science, Information Technology, a Risk Management related field, or equivalent experience.
• In-depth knowledge of IT and cybersecurity risk management concepts, practices and methods.
• Understanding of cloud computing models such as Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). Familiarity with cloud providers like Amazon Web Services (AWS) and serverless technologies.
• Understanding of cybersecurity concepts such as confidentiality, integrity and availability, supply chain risks, cryptography, endpoint and network security, cloud security, mobile security, API security, etc.
• Understanding of DevOps practices and tools used in cloud environments, such as continuous integration/continuous deployment (CI/CD) pipelines and containerization.
• Knowledge of risk management frameworks and methodologies to identify, assess and manage risks.
• Proven experience in risk management within the fintech sector is a plus.
• An advanced degree (e.g., MS with concentration in information systems) is a plus.
• Certificates in information security or IT risk management (CISSP, CEH, OSCP, CISA, CISM, CRISC, ISO27001 and/or other) is a plus.
• Proficiency in using risk management software, tools, and agile methodologies is highly preferred.
• An ability to navigate and thrive in a technology-driven environment, with a strategic mindset towards leveraging technology in risk management to transform our day-to-day.
• Fluent in English and Spanish, with exceptional communication skills to articulate complex risk scenarios and strategies effectively.

Location for this opportunity (City, Country)

• Mexico City, Mexico

Our Benefits

• Chance of earning equity at Nu
• Extended maternity and paternity leaves 
• Health and life insurance 
• Dental and Vision Insurance
• NuCare - Our mental health and wellness assistance program
• Nucleo - Our learning platform of courses
• NuLanguage - Our language learning program
• Holiday Bonus ("Aguinaldo") of 30 days of pay per year
• 17 days of paid vacation with 25% vacation bonus
• Gym partnership
• Food card
• Work-from-home Allowance
• Parental Consultancy
• Relocation Assistance Package, if applicable
•  

Work Model for this Role

• Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/ 

Explore how we build technology at Nubank:

🔗 building.nubank.com.br ↗

🎥 youtube.com/@building.nubank ↗

🎧 Listen to our stories on Spotify ↗

About Us

Nu is one of the largest digital financial platforms in the world, with more than 127 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building.

Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human.

Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/  

About the role

As an Operational Risk Specialist , your mission is to ensure that our operations and critical third parties are properly assessed, monitored, and managed. You will act as a guardian of our resilience strategy, providing oversight and a high-level technical challenge to business areas to maintain operational continuity and regulatory compliance.

Beyond technical oversight, you will play a strategic orchestration role, connecting Business units, Procurement, and Risk assessment teams. Your goal is to ensure the third-party lifecycle is safe, efficient, and standardized, maintaining our competitive edge and long-term success.

You'll be responsible for

• BCM Oversight (Brazil Scope): Overseeing the Business Continuity Plan (BCP) for Brazil, including the critical review and challenge of Business Impact Analysis (BIA) and Operational Continuity Plans (OCP and Disaster Recovery).
• Testing & Validation: Monitoring the execution of continuity tests to validate that recovery capabilities meet both local and global standards.
• Risk Governance & RAS: Executing and monitoring the Risk Acceptance Statement (RAS) monthly, ensuring all resilience metrics are accurately tracked.
• Third-Party Resilience: Ensuring that critical vendors are properly monitored and managed throughout their lifecycle, mitigating risks that could impact our operational stability.
• Cross-Functional Coordination: Acting as the bridge between Procurement, Business areas, and Risk teams to ensure a standardized and secure third-party integration process.
• Regulatory & Audit Interface: Supporting internal/external audits and regulators (BACEN, CVM, ANBIMA) by providing technical evidence and defending our continuity and TPRM framework.

We are looking for a person who has

• Experience in Business Continuity Management and a solid understanding of risk frameworks within the financial services or banking industry.
• Solid experience in the second line of defense (2LoD), focusing on the review, challenge, and oversight of the Business Continuity and Third-Party Risk Management lifecycles.
• Self-driven and thrive in fast-paced environments, with a passion for collaborating across various departments and international borders.
• Strong knowledge of Brazilian regulations (BACEN, CVM, and ANBIMA) and their specific requirements for operational resilience and vendor oversight.
• Ability to translate complex technical information into clear business insights for executive-level reporting.
• Experience in supporting Internal/External Audits and Regulators, providing high-quality technical justifications and evidence within deadlines.
• Advanced English: Ability to interact and align daily with stakeholders from diverse geographies in English, ensuring local requirements are integrated into global policies.
• Clear and objective communication skills, with the ability to present findings to executive leadership and local forums.
• A proactive, self-driven mindset to take full ownership of the BCM review calendar, issue monitoring, and short-term deliverables.
• Experience or knowledge in Third-Party Risk Management is a plus, specifically regarding vendor resilience.

Location for this opportunity (City, Country)

• São Paulo, Brazil 

Our Benefits
Chance of earning equity at Nubank
Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
Public Transportation Commuting Benefit (Vale-Transporte)
NuCare – Psychological, Financial and Legal Assistance Program
Life Insurance
Medical Plan
Dental Plan
NuLanguage – Language Course Program
Nucleo - Our learning platform of courses
Extended Parental Leave
Daycare Allowance
Parental Consultancy
Work-from-home Allowance
Gym Partnerships
30 days of paid vacation
Relocation Assistance Package, if applicable

Work Model for this Role

Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/ 

Explore how we build technology at Nubank:

🔗 building.nubank.com.br ↗

🎥 youtube.com/@building.nubank ↗

🎧 Listen to our stories on Spotify ↗

About Us

Nu is one of the largest digital financial platforms in the world, with more than 122 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building.

Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human.

Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/  

About the team: 

The Credit Risk Squad is part of the 2nd line of Defense, responsible for managing and overseeing the credit risk function of our organization by providing independent oversight and challenge to the first line of defense. As a second line Credit Risk team, we are responsible for creating Expected Credit Losses (ECL) models that are used to calculate loss allowances, making sure the company’s credit risk is managed correctly and efficiently, participating end-to-end in the model development process, including, implementation,monitoring, ensuring operational quality of the data and supporting Finance accounting teams.

About the Role:

As a Credit Risk Specialist  within our Credit Risk Squad (part of the 2nd Line of Defense), you will play a crucial role in supporting Nubank’s world class risk management framework. Your primary focus will be on expected credit loss models development and maintenance, particularly within the retail market portfolios, including credit cards and personal loans. You will contribute significantly to ensuring the company’s credit risk is managed effectively, with a strong emphasis on the universe of credit provisions.

Your key responsibilities will include:

• Developing, implementing, analysing and monitoring risk parameter models (PD, LGD, EAD) relevant to our retail portfolios, ensuring they align with regulations like IFRS9 and 4966. You will be instrumental in making sure we have state of the art models also through activities such as backtesting, data analysis, documentation and operational monitoring.
• Maintaining a strong understanding of relevant local and international regulations concerning provisions and credit risk management, including a surface-level understanding of standards like Bacen 4966 and IFRS9.
• Performing in-depth analysis of credit risk exposure and its implications for expected credit losses (ECL) and loss allowances. This will involve understanding how changes in the credit portfolio impact our provisions.
• Participating in monthly accounting closing activities, contributing to the creation of reports on loss allowance movements.
• Actively contributing to the enhancement of our controls environment within credit risk management. This is crucial for ensuring compliance with regulations such as SOX.
• Liaising with Internal and External Audit teams during model validation processes, ensuring adherence to regulatory requirements and SOX compliance in our operational processes.
• Leveraging your analytical and problem-solving skills to manipulate and learn from data related to the credit portfolio.
• This role requires a strong analytical background, a keen understanding of credit risk principles, and the ability to contribute to a robust and compliant credit risk management framework. Your work will directly impact the accuracy of our financial reporting and the overall stability of our credit operations.

Basic qualifications:

• Bachelor’s degree in Engineering, Economics, Math, Statistics, Physics or related fields
• Analytical, problem solving and passionate to manipulate data in order to learn from it
• Great coding skills (SQL, Python, Scala or other similar programming languages)
• Experience in developing or analyzing outputs of Expected Credit Loss models/PD/EAD/LGD for credit provisioning purposes
• Adaptability to dynamic way of working/short term deliverables

Preferred qualifications

• Advanced or Fluent English
• Experience with SOX controls within risk management environment

Benefits

• Chance of earning equity at Nubank
• Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
• Public Transportation Commuting Benefit (Vale-Transporte)
• NuCare – Psychological, Financial and Legal Assistance Program
• Life Insurance
• Medical Plan
• Dental Plan
• NuLanguage – Language Course Program
• Nucleo - Our learning platform of courses
• Extended Parental Leave
• Daycare Allowance
• Parental Consultancy
• Work-from-home Allowance
• Gym Partnerships
• 30 days of paid vacation
• Relocation Assistance Package, if applicable

Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/

About Nubank:
Nubank was founded in 2013 to free people from a bureaucratic, slow, and inefficient financial system. Since then, through innovative technology and outstanding customer service, the company has been redefining people's relationships with money across Latin America. With operations in Brazil, Mexico, and Colombia, Nubank is one of the world’s largest digital banking platforms and technology-leading companies.
Today, Nubank is a global company with offices in São Paulo (Brazil), Mexico City (Mexico), Buenos Aires (Argentina), Bogotá (Colombia), Durham (United States), and Berlin (Germany). It was founded in 2013 in Sao Paulo by Colombian David Vélez, and cofounded by Brazilian Cristina Junqueira and American Edward Wible. For more information, visit www.nubank.com.br

About the team:
At Nubank we heavily rely on data, machine learning, and AI to drive our strategy and provide the best experience and products to our customers.The Model Risk team plays a crucial role in ensuring Nubank relies on world-class models that meet business and customer needs, and have associated risks under control. We act by providing effective review & challenge and identifying opportunities to improve our models. We also act by implementing governance and validation standards to control the risk of our models, as well as by establishing feedback loops to constantly improve them.

The position:
This is a senior individual contributor role that will require experience in machine learning and analytics, along with knowledge of Expected Credit Loss and its parameters (PD, EAD, LGD).

You will be responsible for

• Conduct independent reviews of quantitative models based on financial, statistical, and machine learning techniques, with a focus on credit risk provisions and capital
• Provide effective challenge to models and modelling processes, identify risks and engage with other teams to strengthen our decision-making tools and capabilities.
• Develop playbooks and toolkits (e.g., Python, SQL, Scala) to optimize model reviews, ongoing monitoring, and assess the impact of models on decision-making. 
• Contribute to the construction of Nubank's Model Risk Management and Model Review processes with autonomy and creativity. 
• Discuss and report model risk status and receive independent opinions from various stakeholders, including senior managers and regulators.
• Be exposed to models from different countries and regulatory requirements.
• Have a strong understanding of relevant local and international regulations and accounting standards concerning credit provisions, including BACEN 4966 and IFRS9.
• Ensure the team maintains technical excellence and actively contributes to establishing model risk controls and processes that strengthen compliance with regulations.
• Mentor junior staff on best practices for Model Oversight and Validation.
• Work in a multicultural, diverse and highly skilled environment.

We are looking for a person who has 

• Experience developing or validating quantitative and/or machine learning models, with a focus on credit provisions and capital requirements models. 
• Interest in reviewing complex machine learning and other types of models to identify risks and propose enhancements.
• Data Science skills, strong knowledge of machine learning tools and techniques.
• Strong programming skills, desirable previous experience with Python, SQL, GitHub. 
• Ability to learn fast, strong analytical, and problem-solving skills.
• Organized and detail-oriented, without losing track of the big picture.
• English language proficiency.
• Experience in relevant local and international regulations and accounting standards related to credit provisions and capital, such as BACEN 4966, IFRS9, ICAAP.

Benefits:

• Health, dental, and life insurance
• Meal allowance
• Transportation assistance
• 30 days of paid vacation
• Chance of earning equity at Nubank
• Parking partnership - discounted parking in our office
• Free bike parking with showers available
• NuCare - Our mental health and wellness assistance program
• NuLanguage - Our language learning program
• Gympass partnership
• Extended maternity and paternity Leaves  
• Child care allowance
• ‘Espaço Feijão’- Private nursing and breastfeeding spaces in our buildings
• Onsite Health Center - Medical support for every Nubanker in our office