US Privacy & AI Governance Senior Specialist

Nubank; Miami (FL); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity opportunity

Medical insurance

Dental & Vision

Life insurance

Maternity/paternity leave

Learning platform access

Language learning program

Mental health support

401K

Savings plans

Work-from-home allowance

Relocation support

Job summary

Nubank, a leading digital bank, seeks a Digital Affairs & DPO Senior Specialist based in the United States to lead privacy, data protection and AI governance across US and global programs.

You will bridge high‑level legal strategy with day‑to‑day execution, driving RoPA, DPIAs, DSRs and third‑party risk, translating complex rules (CCPA/CPRA, GDPR) into practical, scalable controls embedded in products and engineering workflows.

Qualifications

• 8+ years of post‑qualification experience in privacy, data protection and/or technology law, with focus on digital products and fintech.
• Deep knowledge of US privacy laws and GDPR; experience with cross‑border data transfers and DPIAs/PIAs.
• Experience drafting and negotiating DPAs, data sharing agreements and notices; ability to translate legal requirements into actionable product guidance.

Responsibilities

• Lead privacy and AI governance across US and global programs; partner with Legal, Security, Risk and Product teams.
• Develop and manage RoPA, DPIAs/PIAs, DSRs; oversee data mapping and privacy risk controls.
• Translate regulatory expectations into practical, self‑service guidance and governance templates.

Skills

US privacy laws

AI governance

Data protection

Regulatory risk

Privacy by design

Communication

Jira

Confluence

Slack

Google Workspace

Education

Juris Doctor (JD) or equivalent

Tools

Jira

Confluence

Slack

Google Workspace

Job description

Nubank, a leading digital bank, seeks a Digital Affairs & DPO Senior Specialist based in the United States to lead privacy, data protection and AI governance across US and global programs.

You will bridge high‑level legal strategy with day‑to‑day execution, driving RoPA, DPIAs, DSRs and third‑party risk, translating complex rules (CCPA/CPRA, GDPR) into practical, scalable controls embedded in products and engineering workflows.