IT Risk Management Specialist

The role

This person will provide second-line oversight of technology and information security risks across global systems, platforms, and processes. They will work with various teams to identify, assess, and govern technology risks.

What you will do

• Conduct IT and cybersecurity risk assessments across technology domains, platforms, products, features, and critical processes
• Assess and challenge technology risks associated with new products, features, systems, infrastructure, and material changes
• Partner with Engineering, Information Security, Data, Product, Business, and local Risk Management teams to develop mitigation plans
• Support the implementation and consistent application of global IT Risk frameworks, methodologies, policies, procedures, metrics, and governance practices
• Implement, monitor and analyse Key Risk Indicators, metrics, and dashboards for technology and cybersecurity risks
• Prepare clear risk assessments, reports, and recommendations for technical stakeholders, senior management, governance forums, and risk committees
• Support independent control testing and the assessment of control effectiveness
• Monitor technology, cybersecurity, and data-platform incidents and contribute to root-cause analysis
• Provide IT and cybersecurity risk expertise for third-party services, cloud environments, APIs, telecommunications infrastructure, and other technology dependencies
• Monitor regulatory developments, emerging threats, technology changes, and industry practices

Required qualifications

• Strong experience in technology areas, information security, IT risk management, internal controls or another risk-heavy technical role
• Solid understanding of modern technology environments, including information security fundamentals, cloud-native environments such as AWS and GCP, microservices, APIs, CI/CD pipelines, containers, ser
• Strong grounding in risk assessment, risk analysis, mitigation planning, control effectiveness, incident management, risk monitoring, and governance reporting
• Familiarity with risk and security frameworks and regulatory expectations, such as NIST, ISO/IEC 27001, LGPD, and applicable financial-services requirements
• Ability to translate complex technical topics into clear business and risk-oriented insights
• Constructive-challenge mindset
• Strong analytical and problem-solving skills
• Excellent communication and stakeholder management skills
• Ability to work effectively across global and local teams, geographies, functions, and lines of defence
• Pragmatic and collaborative approach to risk management
• Strong ownership, organisation, attention to detail, and ability to manage multiple priorities
• Bachelor’s degree in Computer Science, Engineering, Information Technology, Business, or a related field

Nice to have

• Experience in a regulated financial institution or fintech
• Experience working across countries, global technology teams, or multiple regulatory environments
• Relevant certifications such as CISA, CISSP, CISM, CRISC, CHE, ISO 27001, or equivalent

Benefits

• Chance of earning equity at Nubank
• Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
• Public Transportation Commuting Benefit (Vale-Transporte)
• NuCare – Psychological, Financial and Legal Assistance Program
• Life Insurance
• Medical Plan
• Dental Plan
• NuLanguage – Language Course Program
• Nucleo - Our learning platform of courses
• Extended Parental Leave
• Daycare Allowance
• Parental Consultancy

Before you apply

• Advanced English communication skills, both written and verbal, are essential
• Recruitment process may involve the use of artificial intelligence–enabled tools
• Nu does not provide individualized technical feedback

About the company

Nu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.