IT Risk Senior Specialist

Nubank; Ciudad de México; Híbrido; MXN 900.000 - 1.300.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Equity eligibility

Health and life insurance

Dental and Vision Insurance

Gym partnership

Work-from-home Allowance

Descripción de la vacante

Nu, a leading digital bank in Latin America, seeks a Strategic Technology Risk leader based in Mexico City. The role blends regulatory oversight with design and strengthening of the Technology Risk framework across Risk, Engineering, Security, and Data.

Hybrid work model and cross-functional collaboration are core to the position. You will drive risk metrics, coordinate regulator interactions, and guide risk assessments for new products and architectures, ensuring effective third-party and

Formación

• Minimum 5-6 years of experience in cybersecurity or IT risk management.
• Bachelor's degree in engineering, CS, IT, or related field.
• In-depth knowledge of IT and cybersecurity risk concepts, practices, and methods.
• Understanding of cloud models (IaaS, PaaS, SaaS) with AWS familiarity.
• Knowledge of confidentiality, integrity, availability and cyber risk topics.
• DevOps practices and cloud CI/CD tools knowledge.
• BC/DR experience across lifecycle and contingency planning.
• Fluent in English and Spanish with strong communication.

Responsabilidades

• Define, update, and oversee the Technology Risk framework and policies.
• Monitor technology risk metrics (KRIs, RAS) for governance bodies.
• Coordinate regulatory and audit responses related to Technology Risk.
• Oversee management of high-materiality technology incidents and root-cause analysis.
• Provide guidance on risk assessments for new products and architectures.
• Design IT Third-Party Risk frameworks aligned with standards.
• Ensure quality of IT and cybersecurity control testing and incident monitoring.
• Advise leadership across Risk, Engineering, Security, and Data.

Conocimientos

Cybersecurity

IT Risk Management

Cloud security

CI/CD

English and Spanish

Educación

Bachelor's degree in Engineering/CS/IT or related field

Herramientas

AWS

Serverless

CI/CD tools

Containerization

Descripción del empleo

About Nu

Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services. Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns. Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company's Most Innovative Companies, and Forbes World's Best Banks. Visit our Institutional Page

About the Role

Strategic and regulatory, centered on the design and strengthening of the Technology Risk framework, and on overseeing its implementation through the Technology Risk area and the business areas, ensuring comprehensive, forward-looking management aligned with regulation and the company’s strategy. Supports the oversight and development of the Technology Risk function, defining frameworks, metrics, and guidelines, and supervising the proper management of risks arising from systems, data, infrastructure, and technology third parties. Acts as the main point of contact with governing bodies and regulators on IT Risk matters, coordinates the response to major incidents and technology crises, and helps execute tests, assessments, and monitoring of the technology environment.

Responsibilities

• Define, update, and oversee the Technology Risk framework, including policies, standards, methodologies, and assessment and reporting criteria.

• Establish, update, and monitor technology risk metrics (KRIs, RAS), consolidating the view of exposure and trends for governing bodies.

• Prepare responses and coordinate attention to regulatory and audit requests related to Technology Risk, interacting directly with those authorities when appropriate.

• Oversee the management of high-materiality technology and cybersecurity incidents, including proper classification, root-cause analysis, and definition of corrective actions.

• Provide guidance and challenge technology risk assessments for new products, features, and architectures, ensuring consistency and completeness.

• Design and maintain IT Third-Party Risk frameworks, aligned with institutional standards and regulatory requirements.

• Oversee the quality and consistency of IT and cybersecurity control testing, technology RCSAs, and incident monitoring.

• Act as a key advisor to the leadership of Risk, Engineering, Security, Data, and other areas, fostering a strong culture of Technology Risk management.

Qualifications

• Minimum of 5-6 years of experience in cybersecurity or IT Risk Management.

• Bachelors' degree in Engineering, Computer Science, Information Technology, a Risk Management related field, or equivalent experience.

• In-depth knowledge of IT and cybersecurity risk management concepts, practices and methods.

• Understanding of cloud computing models such as Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). Familiarity with cloud providers like Amazon Web Services (AWS) and serverless technologies.

• Understanding of cybersecurity concepts such as confidentiality, integrity and availability, supply chain risks, cryptography, endpoint and network security, cloud security, mobile security, API security, Cyberincident management, etc.

• Understanding of DevOps practices and tools used in cloud environments, such as continuous integration/continuous deployment (CI/CD) pipelines and containerization.

• Understanding of Business Continuity and Disaster Recovery (BC/DR) practices, along with experience executing and coordinating the full Business Continuity Management lifecycle and contingency response.

• Fluent in English and Spanish, with exceptional communication skills to articulate complex risk scenarios and strategies effectively.

• Demonstrated ability and experience to thrive in a tech-driven environment, ensuring the safe and practical use of technology through targeted challenge and inquiry directed at process and system owners.

Location & Work Model

• Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration.

• This position is based in Mexico City, Mexico

Benefits

• Chance of earning equity at Nu

• Extended maternity and paternity leaves

• Health and life insurance

• Dental and Vision Insurance

• NuCare - Our mental health and wellness assistance program

• Nucleo - Our learning platform of courses

• NuLanguage - Our language learning program

• Holiday Bonus ("Aguinaldo") of 30 days of pay per year

• 17 days of paid vacation with 25% vacation bonus

• Gym partnership

• Food card

• Work-from-home Allowance

• Parental Consultancy

• Relocation Assistance Package, if applicable

Our recruitment process may involve the use of artificial intelligence-enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.