US CISO

Socket.dev; Palo Alto (CA); Hybrid; USD 250,000 - 400,000; Full time

Job summary

Nu is seeking a visionary US Chief Information Security Officer (CISO) to architect and run the unified US security and compliance posture for its US footprint. You will bridge traditional banking regulation with crypto and AI security initiatives while reporting to executives and regulators.

The role requires deep knowledge of OCC and fintech compliance, with experience in crypto-native environments. You will lead governance transformations and oversee cross-functional security teams across

Qualifications

• 15+ years in Information Security at executive/leadership level within FinTech, Banking, or Digital Assets.
• Deep hands-on experience with US regulatory environments, OCC, and financial institution compliance.
• Cryptocurrency security expertise and crypto-native institutional experience.
• Familiarity with AI security risks, model security, and deployment risks.
• Proven track record of rebuilding or scaling GRC in complex organizations.
• Excellent communication with regulators, executives, and boards.

Responsibilities

• Architect and operationalize a unified US security and compliance posture.
• Protect customer trust and ensure OCC compliance.
• Lead governance, risk, and compliance transformations across multi-geography scaling.
• Oversee AI security strategies from development tools to deployment risks.
• Develop and deploy insider threat programs with Risk and Legal teams.

Skills

Executive leadership

US regulatory expertise

Crypto & blockchain security

AI security strategy

GRC scaling

Executive communication

English proficient

Education

Executive/leadership experience in FinTech or digital assets

Tools

Regulatory frameworks tools

Security governance tooling

Job description

About Nu

Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services. Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns. Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks. Visit our Institutional Page

About the team

As Nubank expands its footprint into the US, we are seeking a visionary, highly specialized US Chief Information Security Officer (CISO).

This is not a traditional operational CISO role. You will serve as the executive pillar for Nubank’s US strategy, bridging the gap between traditional financial regulations and modern, hyper-scalable crypto and AI technology platforms. You will act as the point of accountability for US regulatory bodies, lead governance transformations, and oversee critical cross-functional security domain leadership.

We are looking for a security leader who balances deep traditional banking compliance expertise with a forward-looking understanding of cryptocurrency protocols and artificial intelligence security.

About the role

As the US CISO, you will architect, establish, and operationalize a unified US security and compliance posture. You will protect customer trust, satisfy strict US regulatory frameworks (e.g., OCC compliance), and secure frontier technology initiatives ensuring Nubank’s platform remains resilient, future-proof, and compliant as we scale globally.

Key responsibilities and Expectations

• US Regulatory & Regulatory Agency Liaison: Serve as the primary US security authority and point of contact for regulators (e.g. OCC). Oversee all mandatory statutory disclosures, including financial and IBFR background reviews.




• Crypto & Web3 Product Defense: Partner with crypto product and infrastructure teams to secure future-proof financial technologies, translating complex blockchain architectures into compliant, enterprise-grade risk frameworks.




• Governance, Risk, and Compliance (GRC) Transformation: Uplevel Nubank’s GRC program to support multi-geography scaling.




• AI Security Frameworks: Lead the strategic security response for AI initiatives—from developer workflows and engineering toolsets to model integrity and deployment risks.




• Insider Threat Program Development: Design, build, and deploy an end-to-end enterprise Insider Threat program across first and second lines of defense in close partnership with Risk and Legal teams.

Qualifications

Professional Experience & Education

• Executive Leadership Experience: 15+ years in Information Security, with significant experience operating at an executive, director, or CISO level within FinTech, Banking, or Digital Assets.




• US Financial Regulatory Expertise: Deep hands-on experience navigating US regulatory environments, specifically working with the OCC, statutory disclosure processes, and financial institution compliance.




• Cryptocurrency & Blockchain Security: Demonstrated domain expertise in cryptocurrency security, decentralized finance, or digital asset platforms. Experience at leading crypto-native institutions or hyper-growth FinTechs is highly valued.




• AI Security Strategy: Familiarity with modern AI security risks, LLM integrations, safe code generation tools, and model security.




• GRC Upleveling: Proven track record of rebuilding or scaling GRC frameworks within complex, multi-national organizations.




• Executive Communication: Exceptional communication skills needed to interface effectively with regulatory examiners, executive leadership, and board members.

Competencies & Attributes:

• Fluency in English is required; Portuguese and/or Spanish are a plus.




• Strong people leadership at scale, including developing managers and leading teams of differing maturity through change and ambiguity.




• Excellent stakeholder management and communication, with maturity in negotiation and conflict resolution across senior cross-functional partners.




• A pragmatic, hybrid profile, balanced across people leadership, product sensibility, and technical depth rather than weighted to any single one. A genuine product mindset focused on customer and agent outcomes, with the technical depth to raise the bar in architectural discussions.

Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.