GRC Jobs in Belo Horizonte.
All active GRC roles based in Belo Horizonte.
Pick a job to read the details
Tap any role on the left — its description and apply link will open here.
CYBER SECURITY ANALYST III
Share this job
Conheça o Inter
Pioneiros, mudamos o mercado ao lançar o primeiro banco digital do Brasil e seguimos criando tendências com tecnologia de ponta. Evoluímos para um Super App Financeiro Global, com soluções completas e inovação de primeira. Aqui, o trabalho tem propósito: construir oportunidades reais, transformar a vida das pessoas e o mercado financeiro. Esse é o nosso Jeito Inter de Fazer. Se você quer fazer parte dessa mudança e deixar um legado, seu lugar é aqui.
Vem ser Sangue Laranja.
Get to Know Inter
As pioneers, we transformed the market by launching Brazil’s first digital bank and continue to shape the future with cutting-edge technology.
We have evolved into a Global Financial Super App, delivering complete solutions and leading innovation. Here, work has purpose: creating real opportunities, transforming people’s lives, and reshaping the financial market.
This is the Inter way of making things happen. If you want to be part of this transformation and leave your mark, your place is here.
Become Sangue Laranja.
No seu dia a dia, você vai:
- Preparação e Suporte a Auditorias;
- Gestão de Riscos;
- Apoiará na implementação e redesign de estruturas RBAC utilizando SailPoint IdentityNow;
- Participará do role mining para identificação e criação de papéis funcionais otimizados;
- Identificará oportunidades de otimização nos processos de governança IAM;
- Participará de projetos de automação para reduzir trabalho manual em auditorias;
- Colaborará em iniciativas de modernização da plataforma de governança;
- Apoiará implementação de novas funcionalidades e controles no ambiente IAM;
- Gestão de Controles;
- Padronização de Processos;
O que buscamos
Obrigatórios:
- Experiência: 4+ anos em Governança de Identity and Access Management em squad de governança ou GRC;
- Formação completa;
- Experiência em projetos de implementação e redesign de RBAC (Role-Based Access Control);
- Experiência em gestão de projetos de IAM (implementação, migração ou modernização de plataformas)
- Experiência em Controles Regulatórios.
Benefícios
- Vale-alimentação e Vale-refeição
- Plano de saúde e odontológico
- Seguro de vida
- DayOff de Aniversário
- Baby On Board e Sala de Amamentação
- Licença parental estendida
- Auxílio-creche/babá e/ou auxílio para filhos com deficiência
- Wellhub e Grupo de Corrida Inter
- Espaço CARE4U (Belo Horizonte): serviços de autocuidado com valores exclusivos, área de descompressão, jogos e minicampo de golfe
- Vantagens no nosso SuperApp, como Duo Gourmet
- Cartão Prime Inter
- Programas de treinamento e capacitação internos
Etapas do Processo Seletivo
- Triagem de currículos;
- Screening (abordagem inicial para alinhamento de expectativas sobre a vaga);
- Assessments;
- Entrevista com Time de Talent;
- Teste técnico (quando necessário);
- Entrevista com a liderança;
- Proposta de Contratação (Offer);
Ready to apply?
Apply to Inter Carreiras
Senior Security Engineer (GRC)
Share this job
About us
Nubank was founded in 2013 with the mission of fighting complexity to empower people in their daily lives by reinventing financial services. Today, we are one of the largest digital banking platforms in the world, serving millions of customers across Brazil, Mexico, and Colombia. For more information, visit our careers page: https://international.nubank.com.br/careers/
About the team
The Governance, Risk and Compliance (GRC) team enables Nubank to remain compliant with legal, regulatory, and internal requirements, while continuously identifying, classifying, and monitoring risks and providing strategic insights and performance evaluation to leadership.
The GRC squad collaborates with multidisciplinary teams to align our technology security strategy with Nubank’s overall business objectives, ensuring that identified risks are mitigated and that risk-based decision-making is enabled within and beyond the IT & Security Business Unit.
About the role
You will be responsible for acting as a technical reference in security, certifications, and internal controls, serving as a bridge between engineering, risk, audit, and business stakeholders.
You will define strategies, support risk-based decision-making, and ensure that security and compliance requirements are effectively embedded into processes, systems, and products.
Key responsibilities
- Act as a senior technical and governance reference across security, certifications, risk, and internal controls, influencing strategy.
- Identify control gaps and improvement opportunities in technical procedures required for certification and recertification processes (e.g., ISO 27001, PCI-DSS).
- Develop and maintain strong partnerships with business and technical leaders to orchestrate audits, assessments, and remediation plans in a risk-based and scalable way.
- Collaborate with technical teams to define action plans that ensure adherence to regulatory requirements and internal policies.
- Conduct assessments of internal controls, ensuring adherence to internal policies, legal requirements, and industry standards.
- Identify gaps and improvement opportunities in the internal controls landscape and lead control reviews, ensuring timely resolution of issues.
- Work closely with Risk teams to align on the mitigation of identified risks.
- Support responses to audit requests, regulatory inquiries, and due diligence from business partners.
- Partner with Engineering, Product, IT, and global teams to integrate compliance and security requirements into processes and systems.
- Define and monitor KRIs and KPIs, delivering forward-looking, data-driven insights to senior management and Committees.
- Drive continuous improvement and scale, simplifying processes and strengthening Nubank’s Security Maturity as the company grows globally.
Qualification Requirements
- Solid experience in information security, with strong knowledge of frameworks such as PCI-DSS, ISO 27000 family, NIST, and similar.
- Prior experience with security certification processes and/or internal controls, compliance, and audit support.
- Excellent executive communication skills, capable of translating complex topics into clear, actionable insights for senior leadership and committees.
- Experience operating in regulated and global environments, including interaction with auditors and regulators.
- Bachelor’s degree in Engineering, Technology, Security Information, Risk Management or related fields.
- Familiarity with using AI and automation (e.g., machine learning, generative AI, or LLM-based tooling) to enhance security compliance use cases.
- Knowledge of the regulatory landscape relevant to financial services, such as SOx, BACEN, CVM, CNBV, ANBIMA, SEC, and related regulations.
- Hands-on experience with cloud environments (e.g., AWS, GCP) and implementing security controls in these contexts.
- Advanced English (written and verbal) required.
Nice to have Requirements
- Relevant certifications such as CRISC, CISA, Security+, CISSP, or CISM are considered a strong plus.
International experience is highly desirable.
Our Benefits
- Chance of earning equity at Nubank
- Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
- Public Transportation Commuting Benefit (Vale-Transporte)
- NuCare – Psychological, Financial and Legal Assistance Program
- Life Insurance
- Medical Plan
- Dental Plan
- NuLanguage – Language Course Program
- Nucleo - Our learning platform of courses
- Extended Parental Leave
- Daycare Allowance
- Parental Consultancy
- Work-from-home Allowance
- Gym Partnerships
- 30 days of paid vacation
- Relocation Assistance Package, if applicable
Work Model for this Role
Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/
Ready to apply?
Apply to Nubank
Lead Security Engineer (GRC)
Share this job
About us
Nubank was founded in 2013 with the mission of fighting complexity to empower people in their daily lives by reinventing financial services. Today, we are one of the largest digital banking platforms in the world, serving millions of customers across Brazil, Mexico, and Colombia. For more information, visit our careers page: https://international.nubank.com.br/careers/
About the team
The Governance, Risk and Compliance (GRC) team enables Nubank to remain compliant with legal, regulatory, and internal requirements, while continuously identifying, classifying, and monitoring risks and providing strategic insights and performance evaluation to leadership.
The GRC squad collaborates with multidisciplinary teams to align our technology security strategy with Nubank’s overall business objectives, ensuring that identified risks are mitigated and that risk-based decision-making is enabled within and beyond the IT & Security Business Unit.
About the role
You will be responsible for acting as a technical reference in security, certifications, and internal controls, serving as a bridge between engineering, risk, audit, and business stakeholders.
You will define strategies, support risk-based decision-making, and ensure that security and compliance requirements are effectively embedded into processes, systems, and products.
Key responsibilities
- Act as a senior technical and governance reference across security, certifications, risk, and internal controls, influencing strategy.
- Identify control gaps and improvement opportunities in technical procedures required for certification and recertification processes (e.g., ISO 27001, PCI-DSS).
- Develop and maintain strong partnerships with business and technical leaders to orchestrate audits, assessments, and remediation plans in a risk-based and scalable way.
- Collaborate with technical teams to define action plans that ensure adherence to regulatory requirements and internal policies.
- Conduct assessments of internal controls, ensuring adherence to internal policies, legal requirements, and industry standards.
- Identify gaps and improvement opportunities in the internal controls landscape and lead control reviews, ensuring timely resolution of issues.
- Work closely with Risk teams to align on the mitigation of identified risks.
- Support responses to audit requests, regulatory inquiries, and due diligence from business partners.
- Partner with Engineering, Product, IT, and global teams to integrate compliance and security requirements into processes and systems.
- Define and monitor KRIs and KPIs, delivering forward-looking, data-driven insights to senior management and Committees.
- Drive continuous improvement and scale, simplifying processes and strengthening Nubank’s Security Maturity as the company grows globally.
Qualification Requirements
- Solid experience in information security, with strong knowledge of frameworks such as PCI-DSS, ISO 27000 family, NIST, and similar.
- Prior experience with security certification processes and/or internal controls, compliance, and audit support.
- Excellent executive communication skills, capable of translating complex topics into clear, actionable insights for senior leadership and committees.
- Experience operating in regulated and global environments, including interaction with auditors and regulators.
- Bachelor’s degree in Engineering, Technology, Security Information, Risk Management or related fields.
- Familiarity with using AI and automation (e.g., machine learning, generative AI, or LLM-based tooling) to enhance security compliance use cases.
- Knowledge of the regulatory landscape relevant to financial services, such as SOx, BACEN, CVM, CNBV, ANBIMA, SEC, and related regulations.
- Hands-on experience with cloud environments (e.g., AWS, GCP) and implementing security controls in these contexts.
- Advanced English (written and verbal) required.
Nice to have Requirements
- Relevant certifications such as CRISC, CISA, Security+, CISSP, or CISM are considered a strong plus.
International experience is highly desirable.
Our Benefits
- Chance of earning equity at Nubank
- Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
- Public Transportation Commuting Benefit (Vale-Transporte)
- NuCare – Psychological, Financial and Legal Assistance Program
- Life Insurance
- Medical Plan
- Dental Plan
- NuLanguage – Language Course Program
- Nucleo - Our learning platform of courses
- Extended Parental Leave
- Daycare Allowance
- Parental Consultancy
- Work-from-home Allowance
- Gym Partnerships
- 30 days of paid vacation
- Relocation Assistance Package, if applicable
Work Model for this Role
Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/
Ready to apply?
Apply to Nubank
TECHNOLOGY MANAGER | CYBERSECURITY GRC & IAM
Share this job
Conheça o Inter
Pioneiros, mudamos o mercado ao lançar o primeiro banco digital do Brasil e seguimos criando tendências com tecnologia de ponta. Evoluímos para um Super App Financeiro Global, com soluções completas e inovação de primeira. Aqui, o trabalho tem propósito: construir oportunidades reais, transformar a vida das pessoas e o mercado financeiro. Esse é o nosso Jeito Inter de Fazer. Se você quer fazer parte dessa mudança e deixar um legado, seu lugar é aqui.
Vem ser Sangue Laranja.
Get to Know Inter
As pioneers, we transformed the market by launching Brazil’s first digital bank and continue to shape the future with cutting-edge technology.
We have evolved into a Global Financial Super App, delivering complete solutions and leading innovation. Here, work has purpose: creating real opportunities, transforming people’s lives, and reshaping the financial market.
This is the Inter way of making things happen. If you want to be part of this transformation and leave your mark, your place is here.
Become Sangue Laranja.
Sobre a vaga e missão do cargo
Você fará parte do nosso time de Cybersecurity e atuará diretamente com GRC e IAM, garantindo conformidade, melhoria de processos e gestão de acessos .
No seu dia a dia, você vai:
- Liderar equipes multidisciplinares
- Promover cultura organizacional
- Gerenciar orçamentos, recursos e fornecedores da área de GRC e IAM
- Comunicar-se efetivamente com stakeholders executivos
- Liderar comitês de segurança e apresentações para as demais lideranças
- Desenvolver, implementar e manter políticas, normas, instruções de trabalho e diretrizes de segurança cibernética
- Implementar, manter e monitorar os controles de conformidade com regulamentações (SOx, SOC 2, PCI DSS, ISO 27001, LGPD etc.)
- Implementar e gerenciar frameworks de governança de segurança da informação (CIS Controls, NIST CSF 2.0, etc)
- Conduzir avaliações de risco de segurança e elaborar planos de mitigação
- Estabelecer metodologias de análise quantitativa e qualitativa de riscos
- Gerenciar auditorias internas/externas e relacionamento com órgãos reguladores
- Conduzir due diligences e de segurança para novos parceiros e aquisições
- Supervisionar programa de avaliação de riscos internos e de fornecedores
- Monitorar e reportar status dos riscos para as demais lideranças
- Manter registro corporativo de riscos e acompanhar planos de ação
- Implementar e administrar soluções corporativas de gestão de identidade e acesso (IAM)
- Automatizar processos de gestão de identidades e controles de acesso
- Conduzir revisões periódicas de controles de segurança
- Participar de comitês executivos e grupos de trabalho de cibersegurança
- Definir KPIs e prover relatórios executivos da área
- Promover cultura de segurança e programas de conscientização
- Implementar soluções de inteligência artificial e RPA para otimização de controles
- Monitorar continuamente a eficácia dos controles e implementar melhorias
O que buscamos
Obrigatórios:
- Experiência com auditoria interna ou externa, controles internos e/ou SOX.
- Inglês fluente;
- Formação Superior (Nas áreas de Computação, Administração, Engenharia ou afins com auditoria e gerenciamento de riscos);
- Pós-graduação (Nas áreas de Computação, Administração, Engenharia ou afins com auditoria e gerenciamento de riscos);
- Conhecimento intermediário/avançado em Excel.
Desejáveis:
- Espanhol (intermediário ou superior);
- Experiência prévia em auditoria e gerenciamento de riscos;
- Cursos e/ou treinamentos relacionados a auditoria e gerenciamento de riscos;
- Certificações relacionadas a auditoria e gerenciamento de riscos;
Benefícios
- Vale-alimentação e Vale-refeição
- Plano de saúde e odontológico
- Seguro de vida
- DayOff de Aniversário
- Baby On Board e Sala de Amamentação
- Licença parental estendida
- Auxílio-creche/babá e/ou auxílio para filhos com deficiência
- Wellhub e Grupo de Corrida Inter
- Espaço CARE4U (Belo Horizonte): serviços de autocuidado com valores exclusivos, área de descompressão, jogos e minicampo de golfe
- Vantagens no nosso SuperApp, como Duo Gourmet
- Cartão Prime Inter
- Programas de treinamento e capacitação internos
Etapas do Processo Seletivo
- Triagem de currículos;
- Screening (abordagem inicial para alinhamento de expectativas sobre a vaga);
- Assessments;
- Entrevista com Time de Talent;
- Teste técnico (quando necessário);
- Entrevista com a liderança;
- Proposta de Contratação (Offer);
Ready to apply?
Apply to Inter Carreiras
PROCUREMENT SPECIALIST II - TPRM ( Third Party Risk Managament )
Share this job
Conheça o Inter
Pioneiros, mudamos o mercado ao lançar o primeiro banco digital do Brasil e seguimos criando tendências com tecnologia de ponta. Evoluímos para um Super App Financeiro Global, com soluções completas e inovação de primeira. Aqui, o trabalho tem propósito: construir oportunidades reais, transformar a vida das pessoas e o mercado financeiro. Esse é o nosso Jeito Inter de Fazer. Se você quer fazer parte dessa mudança e deixar um legado, seu lugar é aqui.
Vem ser Sangue Laranja.
Get to Know Inter
As pioneers, we transformed the market by launching Brazil’s first digital bank and continue to shape the future with cutting-edge technology.
We have evolved into a Global Financial Super App, delivering complete solutions and leading innovation. Here, work has purpose: creating real opportunities, transforming people’s lives, and reshaping the financial market.
This is the Inter way of making things happen. If you want to be part of this transformation and leave your mark, your place is here.
Become Sangue Laranja.
Sobre a vaga e missão do cargo
No seu dia a dia, você vai:
- Definir e implementar políticas, diretrizes e processos TPRM
- Monitorar compliance de fornecedores e obrigações contratuais
- Avaliar e mitigar riscos do ecossistema de terceiros
- Coordenar auditorias internas/externas relacionadas ao programa TPRM
- Desenvolver treinamentos sobre framework TPRM
- Elaborar relatórios de performance para alta gestão
- Monitorar mudanças regulatórias no Brasil e EUA
O que buscamos
Obrigatórios:
- Graduação em Administração, Economia, Supply Chain ou áreas correlatas
- Mínimo 5 anos de experiência em TPRM, Procurement ou Auditoria Interna
- Conhecimento sólido de regulamentações do setor financeiro Brasil/EUA
- Inglês fluente
- Experiência com ferramentas de análise de dados e sistemas GRC
Desejáveis:
- Inglês avançado profissional
- Conhecimento em ferramentas TPRM (Coupa, Unity Process, Venminder)
- Experiência em empresas de capital aberto
- Background em auditoria ou governança corporativa
Benefícios
- Vale-alimentação e Vale-refeição
- Plano de saúde e odontológico
- Seguro de vida
- DayOff de Aniversário
- Baby On Board e Sala de Amamentação
- Licença parental estendida
- Auxílio-creche/babá e/ou auxílio para filhos com deficiência
- Wellhub e Grupo de Corrida Inter
- Espaço CARE4U (Belo Horizonte): serviços de autocuidado com valores exclusivos, área de descompressão, jogos e minicampo de golfe
- Vantagens no nosso SuperApp, como Duo Gourmet
- Cartão Prime Inter
- Programas de treinamento e capacitação internos
Etapas do Processo Seletivo
- Triagem de currículos;
- Screening (abordagem inicial para alinhamento de expectativas sobre a vaga);
- Assessments;
- Entrevista com Time de Talent;
- Teste técnico (quando necessário);
- Entrevista com a liderança;
- Proposta de Contratação (Offer);
Ready to apply?
Apply to Inter Carreiras