About Nu

Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services.

Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns.

Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks.

Visit our Institutional Page

About the Role

This position sits within Nubank’s global risk management team and provides second-line oversight of risks arising from artificial intelligence and generative AI across the company. You will partner with AI Core, Engineering, Data, Information Security and other first-line teams from the earliest stages of initiatives, while maintaining independent challenge and accountability for risk governance.

The initial focus is to establish scalable AI risk oversight across the company, including risk assessments on cutting edge technologies, providing risk taxonomy, appetite, KRIs, risk and control matrices, control testing, incident oversight, and issue management.

You’ll be Responsible for

• Shift-left risk management by partnering with the first line at the conception and design of AI initiatives, helping teams identify risks and shape proportionate response strategies.

• Recommend and maintain the AI risk appetite statement, metrics, KRIs, and early-warning indicators, including thresholds and escalation logic.

• Oversee risks introduced by AI and GenAI third-party providers, recommending governance requirements and baseline controls for their safe use.

• Enforce consistent risk identification, recommend baseline controls, and independently test key controls.

• Own control testing for AI-related scopes, prioritising the highest risks and most important controls.

• Oversee AI-related incidents, connect them to risk governance, and feed lessons learned back into the taxonomy, controls, appetite, and monitoring approach.

• Review and challenge first-line risk assessments, controls, and decisions.

• Build strong working relationships with Model Risk, Information Security, Data Privacy, Technology Risk, Operational Risk, and other relevant risk teams to clarify roles, coordinate oversight, and avoid gaps or duplication.

What We're Looking For Someone Who Has

• Senior experience in technology, ideally in a second-line risk function or a risk-heavy technical role.

• Fluency with GenAI and large language models, including the AI lifecycle and the non-model risks associated with data, access, resilience, third parties, agentic tool use, and guardrails.

• Strong grounding in core risk practices, including risk assessments, control testing, and risk monitoring.

• Familiarity with relevant governance, risk, and security frameworks, such as NIST AI RMF, the EU AI Act, NIST CSF, ISO/IEC 27001, and ISO 31000, with the judgment to apply them pragmatically.

• A mindset of constructively challenging, and being able to partner with other teams to elaborate resilient and secure solutions.

• Excellent communication and stakeholder management skills, with confidence engaging senior leaders and presenting a clear risk picture in governance forums.

• Strong analytical, problem-solving, and decision-making skills, including the ability to address complex and ambiguous situations.

• A pragmatic, builder’s mentality: comfortable standing up new frameworks and processes, operating with ambiguity, and balancing strong controls with simplicity and speed.

• Strong team-working skills and the ability to build trust across functions, geographies, and lines of defense.

• Bachelor’s degree in Computer Science, Engineering, Information Systems, Risk Management, Business, or a related field.

• Significant experience in technology areas, risk management, AI implementation and governance or a related discipline.

• Demonstrated experience translating technical or emerging risks into practical governance, policies, controls, metrics, and testing approaches.

• Experience working with senior stakeholders and cross-functional teams in a fast-moving, technology-led organisation.

• Experience operating across multiple countries or regulatory environments is a plus.

• Professional fluency in English is expected.

Location

São Paulo, SP - Brazil

Work model

Hybrid

Office requirement

2-3 days per week at the office.

Our Benefits

• Chance of earning equity at Nubank

• Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)

• Public Transportation Commuting Benefit (Vale-Transporte)

• NuCare – Psychological, Financial and Legal Assistance Program

• Life Insurance

• Medical Plan

• Dental Plan

• NuLanguage – Language Course Program

• Nucleo - Our learning platform of courses

• Extended Parental Leave

• Daycare Allowance

• Parental Consultancy

• Work-from-home Allowance

• Gym Partnerships

• 30 days of paid vacation

• Relocation Assistance Package, if applicable

Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.