IT Risk Senior Specialist

Nu México; Ciudad de México; Híbrido; MXN 800.000 - 1.200.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Equity at Nu

Health and life insurance

Dental and Vision Insurance

NuCare mental health program

Learning platform (Nucleo)

Descripción de la vacante

Nu México, a leading digital bank in Latin America, seeks a Technology Risk leader to design and strengthen the Technology Risk framework, oversee its implementation, and ensure forward-looking risk management aligned with regulation and strategy. You will coordinate with regulators, manage incidents, and guide risk assessments across products and platforms.

The role requires extensive IT risk and cybersecurity expertise, fluency in English and Spanish, and a track record in a tech-driven

Formación

• Minimum 5-6 years in cybersecurity or IT risk management.
• Bachelor’s degree in Engineering, Computer Science, IT, or risk-related field, or equivalent experience.
• Deep knowledge of IT and cybersecurity risk management concepts and methods.
• Understanding of cloud models (IaaS, PaaS, SaaS) and AWS.
• Knowledge of cyber security concepts: confidentiality, integrity, availability, supply chain risks, cryptography, and API security.
• Familiarity with DevOps practices and CI/CD in cloud environments.
• BC/DR practices and full BCM lifecycle experience.
• Fluent in English and Spanish with strong communication skills.

Responsabilidades

• Define, update, and oversee the Technology Risk framework and related policies.
• Monitor technology risk metrics (KRIs, RAS) for governance.
• Coordinate responses to regulatory and audit requests related to Technology Risk.
• Oversee high-materiality tech and cybersecurity incidents; perform root-cause analysis.
• Guide risk assessments for new products, features, and architectures.
• Design IT Third-Party Risk frameworks aligned with standards and regs.
• Oversee testing, controls, and incident monitoring for IT and cybersecurity.
• Advise leadership across Risk, Engineering, Security, and Data.

Conocimientos

Cybersecurity risk mgmt

IT Risk Management

Cloud computing

CI/CD pipelines

BC/DR planning

Stakeholder comms

Educación

Bachelor's degree in Engineering/CS/IT or risk-related field

Herramientas

AWS

Serverless

CI/CD

Containerization

Descripción del empleo

About Nu

Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services.

About Nu

Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services.

Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns.

Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks.

Visit our Institutional Page

About The Role

Strategic and regulatory, centered on the design and strengthening of the Technology Risk framework, and on overseeing its implementation through the Technology Risk area and the business areas, ensuring comprehensive, forward-looking management aligned with regulation and the company’s strategy.

Supports the oversight and development of the Technology Risk function, defining frameworks, metrics, and guidelines, and supervising the proper management of risks arising from systems, data, infrastructure, and technology third parties. Acts as the main point of contact with governing bodies and regulators on IT Risk matters, coordinates the response to major incidents and technology crises, and helps execute tests, assessments, and monitoring of the technology environment.

Responsibilities

• Define, update, and oversee the Technology Risk framework, including policies, standards, methodologies, and assessment and reporting criteria.
• Establish, update, and monitor technology risk metrics (KRIs, RAS), consolidating the view of exposure and trends for governing bodies.
• Prepare responses and coordinate attention to regulatory and audit requests related to Technology Risk, interacting directly with those authorities when appropriate.
• Oversee the management of high-materiality technology and cybersecurity incidents, including proper classification, root-cause analysis, and definition of corrective actions.
• Provide guidance and challenge technology risk assessments for new products, features, and architectures, ensuring consistency and completeness.
• Design and maintain IT Third-Party Risk frameworks, aligned with institutional standards and regulatory requirements.
• Oversee the quality and consistency of IT and cybersecurity control testing, technology RCSAs, and incident monitoring.
• Act as a key advisor to the leadership of Risk, Engineering, Security, Data, and other areas, fostering a strong culture of Technology Risk management.

Qualifications

• Minimum of 5-6 years of experience in cybersecurity or IT Risk Management.
• Bachelors’ degree in Engineering, Computer Science, Information Technology, a Risk Management related field, or equivalent experience.
• In-depth knowledge of IT and cybersecurity risk management concepts, practices and methods.
• Understanding of cloud computing models such as Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). Familiarity with cloud providers like Amazon Web Services (AWS) and serverless technologies.
• Understanding of cybersecurity concepts such as confidentiality, integrity and availability, supply chain risks, cryptography, endpoint and network security, cloud security, mobile security, API security, Cyberincident management, etc.
• Understanding of DevOps practices and tools used in cloud environments, such as continuous integration/continuous deployment (CI/CD) pipelines and containerization.
• Understanding of Business Continuity and Disaster Recovery (BC/DR) practices, along with experience executing and coordinating the full Business Continuity Management lifecycle and contingency response.
• Fluent in English and Spanish, with exceptional communication skills to articulate complex risk scenarios and strategies effectively.
• Demonstrated ability and experience to thrive in a tech-driven environment, ensuring the safe and practical use of technology through targeted challenge and inquiry directed at process and system owners.

Location & Work Model

• Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration.
• This position is based in Mexico City, Mexico

Benefits

• Chance of earning equity at Nu
• Extended maternity and paternity leaves
• Health and life insurance
• Dental and Vision Insurance
• NuCare - Our mental health and wellness assistance program
• Nucleo - Our learning platform of courses
• NuLanguage - Our language learning program
• Holiday Bonus ("Aguinaldo") of 30 days of pay per year
• 17 days of paid vacation with 25% vacation bonus
• Gym partnership
• Food card
• Work-from-home Allowance
• Parental Consultancy
• Relocation Assistance Package, if applicable

Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.