AI Risk Management Senior Specialist

Nubank; São Paulo; Presencial; BRL 260 000 - 380 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Equity potential

Meal/food card

Public transportation benefit

Medical plan

Dental plan

Relocation assistance

Resumo da oferta

Nubank in São Paulo, Brazil, is seeking a senior risk professional to join its global risk management team, overseeing AI and generative AI risks across the company, partnering with AI Core, Engineering, Data and Information Security from inception to governance.

You will establish scalable AI risk oversight, develop risk taxonomy, appetite, KRIs, control testing, incident oversight, and issue management, while challenging first-line teams and aligning with international frameworks.

Qualificações

• Senior experience in technology or risk-heavy roles.
• Fluency with GenAI and the AI lifecycle.
• Strong grounding in core risk practices and monitoring.
• Familiarity with governance frameworks (NIST, EU AI Act, ISO standards).
• Ability to translate technical risks into governance, policies and controls.
• Experience engaging senior stakeholders and cross-functional teams.

Responsabilidades

• Shift-left risk management by partnering with the first line at conception and design of AI initiatives.
• Define and maintain AI risk appetite, metrics, KRIs and escalation logic.
• Oversee AI/GenAI third-party risk and baseline controls.
• Enforce consistent risk identification and independently test key controls.
• Own control testing for AI-related scopes with priority on high risks.
• Oversee AI-related incidents and feed lessons into taxonomy and monitoring.
• Review and challenge first-line risk assessments, controls and decisions.
• Collaborate with Model Risk, InfoSec, Data Privacy, Technology Risk and other teams.

Conhecimentos

GenAI fluency

Risk governance

Stakeholder management

Communication

Analytical thinking

Team collaboration

Change management

English proficiency

Second-line risk experience

Formação académica

Bachelor’s degree in Computer Science, Engineering, Information Systems, Risk Management, Business, or related field

Descrição da oferta de emprego

About Nu

Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia.
Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns.
Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks.
Visit our Institutional Page

About the Role

This position sits within Nubank’s global risk management team and provides second-line oversight of risks arising from artificial intelligence and generative AI across the company. You will partner with AI Core, Engineering, Data, Information Security and other first-line teams from the earliest stages of initiatives, while maintaining independent challenge and accountability for risk governance.

The initial focus is to establish scalable AI risk oversight across the company, including risk assessments on cutting edge technologies, providing risk taxonomy, appetite, KRIs, risk and control matrices, control testing, incident oversight, and issue management.
You’ll be Responsible for

• Shift-left risk management by partnering with the first line at the conception and design of AI initiatives, helping teams identify risks and shape proportionate response strategies.
• Recommend and maintain the AI risk appetite statement, metrics, KRIs, and early-warning indicators, including thresholds and escalation logic.
• Oversee risks introduced by AI and GenAI third-party providers, recommending governance requirements and baseline controls for their safe use.
• Enforce consistent risk identification, recommend baseline controls, and independently test key controls.
• Own control testing for AI-related scopes, prioritising the highest risks and most important controls.
• Oversee AI-related incidents, connect them to risk governance, and feed lessons learned back into the taxonomy, controls, appetite, and monitoring approach.
• Review and challenge first-line risk assessments, controls, and decisions.
• Build strong working relationships with Model Risk, Information Security, Data Privacy, Technology Risk, Operational Risk, and other relevant risk teams to clarify roles, coordinate oversight, and avoid gaps or duplication.

What We're Looking For Someone Who Has

• Senior experience in technology, ideally in a second-line risk function or a risk-heavy technical role.
• Fluency with GenAI and large language models, including the AI lifecycle and the non-model risks associated with data, access, resilience, third parties, agentic tool use, and guardrails.
• Strong grounding in core risk practices, including risk assessments, control testing, and risk monitoring.
• Familiarity with relevant governance, risk, and security frameworks, such as NIST AI RMF, the EU AI Act, NIST CSF, ISO/IEC 27001, and ISO 31000, with the judgment to apply them pragmatically.
• A mindset of constructively challenging, and being able to partner with other teams to elaborate resilient and secure solutions.
• Excellent communication and stakeholder management skills, with confidence engaging senior leaders and presenting a clear risk picture in governance forums.
• Strong analytical, problem-solving, and decision-making skills, including the ability to address complex and ambiguous situations.
• A pragmatic, builder’s mentality: comfortable standing up new frameworks and processes, operating with ambiguity, and balancing strong controls with simplicity and speed.
• Strong team-working skills and the ability to build trust across functions, geographies, and lines of defense.
• Bachelor’s degree in Computer Science, Engineering, Information Systems, Risk Management, Business, or a related field.
• Significant experience in technology areas, risk management, AI implementation and governance or a related discipline.
• Demonstrated experience translating technical or emerging risks into practical governance, policies, controls, metrics, and testing approaches.
• Experience working with senior stakeholders and cross-functional teams in a fast-moving, technology-led organisation.
• Experience operating across multiple countries or regulatory environments is a plus.
• Professional fluency in English is expected.

Location

São Paulo, SP - Brazil

Work model

Hybrid

Office requirement

2-3 days per week at the office.

Our Benefits

• Chance of earning equity at Nubank
• Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
• Public Transportation Commuting Benefit (Vale-Transporte)
• NuCare – Psychological, Financial and Legal Assistance Program
• Life Insurance
• Medical Plan
• Dental Plan
• NuLanguage – Language Course Program
• Nucleo - Our learning platform of courses
• Extended Parental Leave
• Daycare Allowance
• Parental Consultancy
• Work-from-home Allowance
• Gym Partnerships
• 30 days of paid vacation
• Relocation Assistance Package, if applicable

Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.