Digital Affairs & DPO Senior Specialist

The role

You will act as a key point of contact for complex privacy, data protection, and AI topics in the US. You will provide legal guidance to product and engineering teams and manage global privacy governance workflows.

What you will do

• Provide legal guidance to product, engineering, data and business teams on US and global privacy, data protection, AI and cybersecurity.
• Conduct legal risk assessments for new and existing products and AI/ML use cases.
• Draft, review and negotiate privacy-relevant documentation and cross-border data transfer mechanisms.
• Translate US and international privacy/AI requirements into operational guidance.
• Co-lead the execution of the global privacy governance roadmap.
• Own or co-own privacy governance pillars including RoPA, DPIAs/PIAs, and DSR strategy.
• Design and implement projects to simplify and automate privacy governance.
• Maintain and enhance how Nu handles data subject rights requests.
• Assess third parties and new data-sharing arrangements from a privacy and AI-governance perspective.
• Coordinate and improve the global privacy incident response process.

Required qualifications

• 8+ years of post-qualification experience in privacy, data protection and/or technology law.
• Significant portion of experience dedicated to digital products and/or fintech/financial services, or equivalent experience in house or in top law firms / consultancies.
• Outstanding organizational, communication and relationship-building skills.
• Deep, hands-on knowledge of US privacy and data protection laws (e.g., CCPA/CPRA, sectoral and state privacy laws).
• Practical familiarity with international data protection regulation, particularly GDPR.
• Strong understanding of AI, data and cyber topics, including automated decision-making, profiling, model governance and AI-driven products.
• Solid experience with privacy governance frameworks (e.g., privacy management frameworks, DPIAs/PIAs, RoPA, controls and metrics).
• Strong experience with productivity and collaboration tools (e.g., Jira, Confluence, Slack, Google Workspace).
• Excellent written and verbal communication skills in English.
• Law degree (JD or equivalent).
• Active license in at least one US jurisdiction, or equivalent senior in-house/regulatory experience.

Nice to have

• Experience with agentic payments, open banking, or other new payment technology
• Experience with ECOA/Reg B, FCRA, UDAAP, and EFTA/Reg E
• Portuguese or Spanish
• Experience interfacing with or supporting interactions with regulators, DPAs or supervisory authorities
• Relevant privacy certifications (e.g., CIPP/US, CIPP/E, CIPM, EXIN DPO)

Benefits

• Opportunity of earning equity at Nu
• Medical Insurance
• Dental and Vision Insurance
• Life Insurance and AD&D
• Extended maternity and paternity leaves
• Nucleo - Our learning platform of courses
• NuLanguage - Our language learning program
• NuCare - Our mental health and wellness assistance program
• 401K
• Saving Plans - Health Saving Account and Flexible Spending Account
• Work-from-home Allowance
• Relocation Assistance Package, if applicable

Before you apply

• Recruitment process may involve the use of artificial intelligence–enabled tools
• Nu does not provide individualized technical feedback

About the company

Nu serves more than 140 million customers with a mission to fight complexity and empower people. The company uses proprietary technology and data at scale to power its digital platform.