IT Risk Senior Analyst

Nubank; São Paulo; Presencial; BRL 120.000 - 160.000; Tempo integral

Resumo da oferta

A leading digital banking platform is seeking an IT Risk Senior Analyst to ensure security and compliance within its systems. The role requires extensive experience in cybersecurity and risk management, focusing on risk assessments and mitigation strategies. Candidates must hold a bachelor's degree in Information Security or related fields, and fluency in English is required. The position offers competitive benefits, including health insurance and vacation days.

Serviços

Health, dental, and life insurance

Meal allowance

Transportation assistance

30 days of paid vacation

Chance of earning equity

Parking partnership

Free bike parking

Mental health program

Language learning program

Gympass partnership

Extended maternity and paternity leaves

Child care allowance

Private nursing spaces

Onsite health center

Qualificações

• 5+ years of experience in cybersecurity or IT risk management.
• In-depth understanding of information security principles.
• Strong knowledge of technology environments.

Responsabilidades

• Conduct comprehensive risk assessments across IT domains.
• Develop and implement effective risk mitigation strategies.
• Monitor regulatory changes and ensure compliance.

Conhecimentos

Cybersecurity

Risk Assessment

Analytical skills

Problem-solving

Advanced English communication

Formação académica

Bachelor's degree in Information Security

Master's degree (a plus)

CISA (certification)

CISSP (certification)

CRISC (certification)

Ferramentas

NIST

LGPD

ISO 27001

AWS

GCP

Descrição da oferta de emprego

About Nubank:
Nubank was founded in 2013 to free people from a bureaucratic, slow, and inefficient financial system. Since then, through innovative technology and outstanding customer service, the company has been redefining people's relationships with money across Latin America. With operations in Brazil, Mexico, and Colombia, Nubank is one of the world’s largest digital banking platforms and technology-leading companies.
Today, Nubank is a global company with offices in São Paulo (Brazil), Mexico City (Mexico), Buenos Aires (Argentina), Bogotá (Colombia), Durham (United States), and Berlin (Germany). It was founded in 2013 in Sao Paulo by Colombian David Vélez, and cofounded by Brazilian Cristina Junqueira and American Edward Wible. For more information, visit www.nubank.com.br

About the team:
IT Risk Team is part of the Risk Management Tribe at Nubank, responsible for identifying and managing technology and information security risks across information technology systems, including microservices, and processes. IT Risk Management consists in helping the business to identify threats and vulnerabilities in order to mitigate information technology risks that could materialize and negatively impact data confidentiality, integrity, and availability.
About the role:
In the role of the IT Risk Senior Analyst, you will be in charge of playing a crucial part in ensuring the security, compliance, and overall risk management of our organization's information technology systems, including microservices, and processes. As a senior IT Risk member and part of the second line of defense, you will be responsible for working in partnership with Business Units, leading risk assessment initiatives, implementing risk mitigation strategies, and collaborating with cross-functional and multidisciplinary teams across to maintain a robust IT Risk management framework.

Key Responsibilities:

• Conduct comprehensive risk assessments across various IT domains, identifying potential vulnerabilities, threats, and impacts. Analyze risks to determine their significance and develop insights for senior management.
• Develop and implement effective risk mitigation strategies that align with business objectives and regulatory requirements (E.g., for BCB: Res. 85 and 4893, and for Investments: CVM 035, CVM 021, and PQO). Collaborate with relevant stakeholders to ensure the successful execution of risk management initiatives.
• Monitor regulatory changes and industry best practices to ensure the organization's IT risk management practices remain compliant. Assist in the development and enforcement of IT risk management policies and procedures.
• Collaborate with incident response teams to develop plans for handling and recovering from IT security incidents. Participate in post-incident analysis and recommend improvements to prevent future occurrences.
• Communicate complex IT risk issues and solutions to both technical and non-technical stakeholders. Prepare metrics, reports, and updates for senior management and executive leadership.
• Drive continuous improvement in IT risk management processes. Identify opportunities to enhance existing procedures, tools, and methodologies to adapt to evolving risk landscapes.
• Provide guidance and mentorship to junior members of the IT risk team. Assist in their professional development by sharing expertise and knowledge.

Qualification Requirements:

• Minimum of 5 years relevant experience in cybersecurity or IT Risk Management, with a focus on risk assessment, analysis, and mitigation.
• Bachelor's degree in Information Security, Computer Science, or a related field. Master's degrees or relevant certifications (e.g., CISA, CISSP, CRISC, and/or other) are pluses.
• In-depth understanding of information security principles, risk frameworks, and regulatory compliance (e.g., NIST, LGPD, ISO 27001).
• Analytical and problem-solving skills, with the ability to translate complex technical information into clear business insights.
• Strong knowledge of technology environments, including information security, identity and access management, and cloud-born environments (e.g.: AWS and GCP).
• Advanced English communication skills, both written and verbal.

Benefits:

• Health, dental, and life insurance
• Meal allowance
• Transportation assistance
• 30 days of paid vacation
• Chance of earning equity at Nubank
• Parking partnership - discounted parking in our office
• Free bike parking with showers available
• NuCare - Our mental health and wellness assistance program
• NuLanguage - Our language learning program
• Gympass partnership
• Extended maternity and paternity Leaves
• Child care allowance
• ‘Espaço Feijão’- Private nursing and breastfeeding spaces in our buildings
• Onsite Health Center - Medical support for every Nubanker in our office

Diversity and Inclusion at Nubank
We want to have a product for everyone, and we build strong and diverse teams that rise to the challenge. We are a team of the most creative people in technology, and we hire with equal opportunity, irrespective of gender, ethnicity, religion, sexual orientation, or background. We are a very process-light organization that values human interactions, and that is an essential part of our culture.

At Nubank, everyone has the opportunity to speak up and participate, grow, and share ideas.