GRC Jobs in Sao Paulo.
All active GRC roles based in Sao Paulo.
Pick a job to read the details
Tap any role on the left — its description and apply link will open here.
About Us
Nu is one of the largest digital financial platforms in the world, with more than 122 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building.
Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human.
Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/
About the Team
The Enterprise Risk Management squad sets the global standards for how Nubank identifies, assesses and manages risk across the enterprise – spanning operational, compliance, technology, conduct and other non‑financial risks, and strongly interfacing with financial risk areas (credit, market, liquidity, capital, treasury).
As part of the ERM Methodology Team, you will sit at the intersection of risk, product and platform: shaping global frameworks, embedding them into data and systems, and scaling them with AI‑enabled workflows so that ERM becomes both a competitive advantage and an enabler of safe growth across products, portfolios and geographies. You will be a reference for methodology decisions, influencing senior stakeholders across multiple lines of defense and risk types.
What you'll do
-
Own the end‑to‑end design and evolution of ERM methodologies, ensuring coherence across programs and geographies.
-
Ensure ERM methodologies connect across risk types (e.g., operational, compliance, technology, conduct, model, financial/credit where relevant) and support a consistent view of the risk profile.
-
Translate methodological requirements into GRC platform, product and data specifications, partnering with Platform and engineering teams to build scalable, intuitive workflows.
-
Lead the global standardization of global ERM methodologies while enabling smart local adaptations to meet regulatory expectations in each geo.
-
Design and drive the integration of ERM programs in new geos, ensuring that new launches start already aligned with group‑level risk standards and governance.
-
Define and embed AI/agent use‑cases into ERM workflows (e.g., risk/control suggestions, narrative pre‑population, quality checks), with clear human‑in‑the‑loop governance.
-
Use AI and analytics to monitor quality and consistency of methodologies, surfacing insights and opportunities for continuous improvement.
-
Partner with risk leaders (financial and non-financial risks), CRO teams, risk stewards and 1LOD to ensure strong adoption and practical usability of ERM frameworks in day‑to‑day decision making.
-
Represent ERM methodologies in governance and decision forums.
-
Create and refine key risk and performance indicators for ERM programs, enabling better visibility on program effectiveness, maturity and trends.
-
Communicate clearly and regularly about ERM methodology initiatives and projects with a wide variety of stakeholders (risk teams in different countries, financial risk functions, internal audit, leadership, product and platform).
What we're looking for (Minimum qualifications)
-
Solid experience in Enterprise Risk / Operational Risk / Non‑Financial Risk, with hands‑on ownership of at least one major program or framework (RCSA, control testing, Issue Management, NP&F or equivalent enterprise‑level framework).
-
Proven track record as a senior individual contributor leading complex risk initiatives end‑to‑end, from design to rollout, with limited oversight.
-
Experience working in multi‑geo or global environments, balancing global standards with local regulatory expectations.
-
Strong ability to translate risk methodologies into systems and data (platform requirements, data models, workflow design) in partnership with engineering and product.
-
Demonstrated stakeholder management and influence without formal authority, especially across product, risk, compliance and platform/engineering teams.
-
Comfort working with data and analytics (e.g., querying datasets, interpreting dashboards, defining metrics) to guide decisions on methodology and program performance.
-
Experience defining and tracking metrics, SLAs and KPIs for risk/controls or governance processes.
-
Strong written and verbal communication in English, including the ability to explain complex risk concepts to non‑experts.
Nice to Have
-
Prior experience in ERM, operational risk, internal controls in financial services or fintech.
-
Previous work in designing frameworks, methodologies and governance for risk (financial and/or non‑financial), influencing multiple lines of defense and senior stakeholders across geos.
-
Exposure to AI/ML or advanced analytics applied to risk, controls, data quality or governance (e.g., LLMs, anomaly detection, smart suggestions).
-
Experience working closely with platform / GRC / risk systems (e.g., JIRA‑based workflows, custom risk platforms, governance tooling).
-
Familiarity with regulatory expectations for risks and governance in Brazil and/or other key markets, including reading requirements and translating them into practical frameworks.
-
Background in high‑growth tech/fintech environments, navigating the tension between speed, innovation and robust risk management.
Benefits
-
Chance of earning equity at Nubank
-
Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
-
Public Transportation Commuting Benefit (Vale-Transporte)
-
NuCare – Psychological, Financial and Legal Assistance Program
-
Life Insurance
-
Medical Plan
-
Dental Plan
-
NuLanguage – Language Course Program
-
Nucleo - Our learning platform of courses
-
Extended Parental Leave
-
Daycare Allowance
-
Parental Consultancy
-
Work-from-home Allowance
-
Gym Partnerships
-
30 days of paid vacation
-
Relocation Assistance Package, if applicable
Work Model for this Role
Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/
Ready to apply?
Apply to Nubank
About the Team: Our Technical Support Engineering team is the backbone of our customer success, providing expert assistance and driving efficient solutions to complex technical challenges. We're a collaborative group of problem-solvers, passionate about delivering exceptional support and fostering strong relationships with our customers. Working within a global environment, we value teamwork, innovation, and a commitment to continuous improvement.
Responsibilities:
- Work as the primary point of contact for all tickets in your name
- Act as an escalation point for the Technical Support and Technical Account Management team
- Analyze and troubleshoot incidents with a one-touch resolution mindset
- Interpret customer questions on product usage and provide detailed and timely answers
- Write detailed and thorough escalation notes for sending tickets to senior engineering teams
- Perform routine follow-ups and ticket management via email and the case management system
- Write and maintain the internal and external knowledge bases
- Communicate with customers and internal parties about existing tickets and identify common patterns
- Provide feedback to management about improvements to processes and procedures
Minimum Qualifications:
- 3+ years of professional experience in a Technical Support role within software and/or technology.
- Exceptional communication skills, both written and verbal, with the ability to clearly convey complex technical concepts to diverse audiences (technical and non-technical, internal and external) in a business-to-business setting.
- Proven experience in in-depth software troubleshooting, demonstrating a customer-centric approach, a strong sense of ownership, and the ability to maintain a positive and collaborative attitude within a global technical support environment
- Ability to create and maintain comprehensive technical documentation, including knowledge-base articles, how-to guides, and troubleshooting guides.
- Understanding of networking fundamentals, including TCP/IP, routing, subnets, firewall rules, and proxy connectivity, coupled with the ability to utilize system-level tools for network troubleshooting and validation of open ports.
- Experience with RESTful APIs, their usage, and how they are leveraged in corporate environments
- Experience of AI
- Proficient in navigating and performing basic tasks within a Linux Shell in a professional enterprise environment
Preferred Qualifications:
- Experience reading or writing code with a strong preference for Python.
- Ability to effectively analyze application logs and data sets to extract relevant information for troubleshooting and resolving technical issues.
- Ability to build cURL commands and use them as a troubleshooting tool
- Experience with TLS and Certificate troubleshooting
- Basic understanding of and experience with SAML
- Experience with database platforms and ability to troubleshoot reading from databases
- Experience with the following platforms:
- MongoDB
- Docker
- OpenVPN
#LI-MDI
#Remote
About Axonius:
Axonius transforms cyber asset intelligence into actionability. With the Axonius Asset Cloud, customers preemptively tackle high-risk and hard-to-spot threat exposures, misconfigurations, and overspending. The integrated platform brings together data from every system in an organization’s IT infrastructure to optimize mission-critical risk, performance, and cost measures via actionable intelligence.
Covering cyber assets, software, SaaS applications, identities, vulnerabilities, infrastructure, and more, Axonius is the one place to go for Security, IT, and GRC teams to continuously drive actionability across the organization. Cited as one of the fastest-growing cybersecurity startups, with accolades from CNBC, Forbes, and Fortune, Axonius supports millions of assets for leading customers across industries and around the world.
Axonius makes it a priority to invest in our people with competitive compensation and benefits, growth opportunities, community-building, and so much more. Learn more about benefits at Axonius.
At Axonius we support a diverse and inclusive workplace and believe in equal employment opportunity. We welcome people of different backgrounds, experiences, abilities and perspectives to apply. All qualified applicants will receive consideration for employment without regard to race, color, ancestry, religion, age, sex, gender identity, national origin, sexual orientation, citizenship, marital status, disability, or Veteran status.
By submitting your application to us, you acknowledge that your personal data will be processed in accordance with our Global Job Candidate Privacy Notice.
Ready to apply?
Apply to Axonius
Senior Security Engineer (GRC)
Share this job
About us
Nubank was founded in 2013 with the mission of fighting complexity to empower people in their daily lives by reinventing financial services. Today, we are one of the largest digital banking platforms in the world, serving millions of customers across Brazil, Mexico, and Colombia. For more information, visit our careers page: https://international.nubank.com.br/careers/
About the team
The Governance, Risk and Compliance (GRC) team enables Nubank to remain compliant with legal, regulatory, and internal requirements, while continuously identifying, classifying, and monitoring risks and providing strategic insights and performance evaluation to leadership.
The GRC squad collaborates with multidisciplinary teams to align our technology security strategy with Nubank’s overall business objectives, ensuring that identified risks are mitigated and that risk-based decision-making is enabled within and beyond the IT & Security Business Unit.
About the role
You will be responsible for acting as a technical reference in security, certifications, and internal controls, serving as a bridge between engineering, risk, audit, and business stakeholders.
You will define strategies, support risk-based decision-making, and ensure that security and compliance requirements are effectively embedded into processes, systems, and products.
Key responsibilities
- Act as a senior technical and governance reference across security, certifications, risk, and internal controls, influencing strategy.
- Identify control gaps and improvement opportunities in technical procedures required for certification and recertification processes (e.g., ISO 27001, PCI-DSS).
- Develop and maintain strong partnerships with business and technical leaders to orchestrate audits, assessments, and remediation plans in a risk-based and scalable way.
- Collaborate with technical teams to define action plans that ensure adherence to regulatory requirements and internal policies.
- Conduct assessments of internal controls, ensuring adherence to internal policies, legal requirements, and industry standards.
- Identify gaps and improvement opportunities in the internal controls landscape and lead control reviews, ensuring timely resolution of issues.
- Work closely with Risk teams to align on the mitigation of identified risks.
- Support responses to audit requests, regulatory inquiries, and due diligence from business partners.
- Partner with Engineering, Product, IT, and global teams to integrate compliance and security requirements into processes and systems.
- Define and monitor KRIs and KPIs, delivering forward-looking, data-driven insights to senior management and Committees.
- Drive continuous improvement and scale, simplifying processes and strengthening Nubank’s Security Maturity as the company grows globally.
Qualification Requirements
- Solid experience in information security, with strong knowledge of frameworks such as PCI-DSS, ISO 27000 family, NIST, and similar.
- Prior experience with security certification processes and/or internal controls, compliance, and audit support.
- Excellent executive communication skills, capable of translating complex topics into clear, actionable insights for senior leadership and committees.
- Experience operating in regulated and global environments, including interaction with auditors and regulators.
- Bachelor’s degree in Engineering, Technology, Security Information, Risk Management or related fields.
- Familiarity with using AI and automation (e.g., machine learning, generative AI, or LLM-based tooling) to enhance security compliance use cases.
- Knowledge of the regulatory landscape relevant to financial services, such as SOx, BACEN, CVM, CNBV, ANBIMA, SEC, and related regulations.
- Hands-on experience with cloud environments (e.g., AWS, GCP) and implementing security controls in these contexts.
- Advanced English (written and verbal) required.
Nice to have Requirements
- Relevant certifications such as CRISC, CISA, Security+, CISSP, or CISM are considered a strong plus.
International experience is highly desirable.
Our Benefits
- Chance of earning equity at Nubank
- Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
- Public Transportation Commuting Benefit (Vale-Transporte)
- NuCare – Psychological, Financial and Legal Assistance Program
- Life Insurance
- Medical Plan
- Dental Plan
- NuLanguage – Language Course Program
- Nucleo - Our learning platform of courses
- Extended Parental Leave
- Daycare Allowance
- Parental Consultancy
- Work-from-home Allowance
- Gym Partnerships
- 30 days of paid vacation
- Relocation Assistance Package, if applicable
Work Model for this Role
Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/
Ready to apply?
Apply to Nubank
Lead Security Engineer (GRC)
Share this job
About us
Nubank was founded in 2013 with the mission of fighting complexity to empower people in their daily lives by reinventing financial services. Today, we are one of the largest digital banking platforms in the world, serving millions of customers across Brazil, Mexico, and Colombia. For more information, visit our careers page: https://international.nubank.com.br/careers/
About the team
The Governance, Risk and Compliance (GRC) team enables Nubank to remain compliant with legal, regulatory, and internal requirements, while continuously identifying, classifying, and monitoring risks and providing strategic insights and performance evaluation to leadership.
The GRC squad collaborates with multidisciplinary teams to align our technology security strategy with Nubank’s overall business objectives, ensuring that identified risks are mitigated and that risk-based decision-making is enabled within and beyond the IT & Security Business Unit.
About the role
You will be responsible for acting as a technical reference in security, certifications, and internal controls, serving as a bridge between engineering, risk, audit, and business stakeholders.
You will define strategies, support risk-based decision-making, and ensure that security and compliance requirements are effectively embedded into processes, systems, and products.
Key responsibilities
- Act as a senior technical and governance reference across security, certifications, risk, and internal controls, influencing strategy.
- Identify control gaps and improvement opportunities in technical procedures required for certification and recertification processes (e.g., ISO 27001, PCI-DSS).
- Develop and maintain strong partnerships with business and technical leaders to orchestrate audits, assessments, and remediation plans in a risk-based and scalable way.
- Collaborate with technical teams to define action plans that ensure adherence to regulatory requirements and internal policies.
- Conduct assessments of internal controls, ensuring adherence to internal policies, legal requirements, and industry standards.
- Identify gaps and improvement opportunities in the internal controls landscape and lead control reviews, ensuring timely resolution of issues.
- Work closely with Risk teams to align on the mitigation of identified risks.
- Support responses to audit requests, regulatory inquiries, and due diligence from business partners.
- Partner with Engineering, Product, IT, and global teams to integrate compliance and security requirements into processes and systems.
- Define and monitor KRIs and KPIs, delivering forward-looking, data-driven insights to senior management and Committees.
- Drive continuous improvement and scale, simplifying processes and strengthening Nubank’s Security Maturity as the company grows globally.
Qualification Requirements
- Solid experience in information security, with strong knowledge of frameworks such as PCI-DSS, ISO 27000 family, NIST, and similar.
- Prior experience with security certification processes and/or internal controls, compliance, and audit support.
- Excellent executive communication skills, capable of translating complex topics into clear, actionable insights for senior leadership and committees.
- Experience operating in regulated and global environments, including interaction with auditors and regulators.
- Bachelor’s degree in Engineering, Technology, Security Information, Risk Management or related fields.
- Familiarity with using AI and automation (e.g., machine learning, generative AI, or LLM-based tooling) to enhance security compliance use cases.
- Knowledge of the regulatory landscape relevant to financial services, such as SOx, BACEN, CVM, CNBV, ANBIMA, SEC, and related regulations.
- Hands-on experience with cloud environments (e.g., AWS, GCP) and implementing security controls in these contexts.
- Advanced English (written and verbal) required.
Nice to have Requirements
- Relevant certifications such as CRISC, CISA, Security+, CISSP, or CISM are considered a strong plus.
International experience is highly desirable.
Our Benefits
- Chance of earning equity at Nubank
- Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
- Public Transportation Commuting Benefit (Vale-Transporte)
- NuCare – Psychological, Financial and Legal Assistance Program
- Life Insurance
- Medical Plan
- Dental Plan
- NuLanguage – Language Course Program
- Nucleo - Our learning platform of courses
- Extended Parental Leave
- Daycare Allowance
- Parental Consultancy
- Work-from-home Allowance
- Gym Partnerships
- 30 days of paid vacation
- Relocation Assistance Package, if applicable
Work Model for this Role
Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/
Ready to apply?
Apply to Nubank