About Nu
Nu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.
Proprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability.
Visit our Institutional Page
About the Team
The Enterprise Risk Management squad sets the global standards for how Nubank identifies, assesses and manages risk across the enterprise – spanning operational, compliance, technology, conduct and other non‑financial risks, and strongly interfacing with financial risk areas (credit, market, liquidity, capital, treasury).
As part of the ERM Methodology Team, you will sit at the intersection of risk, product and platform: shaping global frameworks, embedding them into data and systems, and scaling them with AI‑enabled workflows so that ERM becomes both a competitive advantage and an enabler of safe growth across products, portfolios and geographies. You will be a reference for methodology decisions, influencing senior stakeholders across multiple lines of defense and risk types.
What you'll do
Own the end‑to‑end design and evolution of ERM methodologies, ensuring coherence across programs and geographies.
Ensure ERM methodologies connect across risk types (e.g., operational, compliance, technology, conduct, model, financial/credit where relevant) and support a consistent view of the risk profile.
Translate methodological requirements into GRC platform, product and data specifications, partnering with Platform and engineering teams to build scalable, intuitive workflows.
Lead the global standardization of global ERM methodologies while enabling smart local adaptations to meet regulatory expectations in each geo.
Design and drive the integration of ERM programs in new geos, ensuring that new launches start already aligned with group‑level risk standards and governance.
Define and embed AI/agent use‑cases into ERM workflows (e.g., risk/control suggestions, narrative pre‑population, quality checks), with clear human‑in‑the‑loop governance.
Use AI and analytics to monitor quality and consistency of methodologies, surfacing insights and opportunities for continuous improvement.
Partner with risk leaders (financial and non-financial risks), CRO teams, risk stewards and 1LOD to ensure strong adoption and practical usability of ERM frameworks in day‑to‑day decision making.
Represent ERM methodologies in governance and decision forums.
Create and refine key risk and performance indicators for ERM programs, enabling better visibility on program effectiveness, maturity and trends.
Communicate clearly and regularly about ERM methodology initiatives and projects with a wide variety of stakeholders (risk teams in different countries, financial risk functions, internal audit, leadership, product and platform).
What we're looking for:
Solid experience in Enterprise Risk / Operational Risk / Non‑Financial Risk, with hands‑on ownership of at least one major program or framework (RCSA, control testing, Issue Management, NP&F or equivalent enterprise‑level framework).
Proven track record as a senior individual contributor leading complex risk initiatives end‑to‑end, from design to rollout, with limited oversight.
Experience working in multi‑geo or global environments, balancing global standards with local regulatory expectations.
Strong ability to translate risk methodologies into systems and data (platform requirements, data models, workflow design) in partnership with engineering and product.
Demonstrated stakeholder management and influence without formal authority, especially across product, risk, compliance and platform/engineering teams.
Comfort working with data and analytics (e.g., querying datasets, interpreting dashboards, defining metrics) to guide decisions on methodology and program performance.
Experience defining and tracking metrics, SLAs and KPIs for risk/controls or governance processes.
Strong written and verbal communication in English, including the ability to explain complex risk concepts to non‑experts.
Nice to Have
Prior experience in ERM, operational risk, internal controls in financial services or fintech.
Previous work in designing frameworks, methodologies and governance for risk (financial and/or non‑financial), influencing multiple lines of defense and senior stakeholders across geos.
Exposure to AI/ML or advanced analytics applied to risk, controls, data quality or governance (e.g., LLMs, anomaly detection, smart suggestions).
Experience working closely with platform / GRC / risk systems (e.g., JIRA‑based workflows, custom risk platforms, governance tooling).
Familiarity with regulatory expectations for risks and governance in Brazil and/or other key markets, including reading requirements and translating them into practical frameworks.
Background in high‑growth tech/fintech environments, navigating the tension between speed, innovation and robust risk management.
Location
São Paulo, Brazil
Work model
Hybrid
Office requirement
2-3 days per week at the office
Benefits
Chance of earning equity at Nubank
Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
Public Transportation Commuting Benefit (Vale-Transporte)
NuCare – Psychological, Financial and Legal Assistance Program
Life Insurance
Medical Plan
Dental Plan
NuLanguage – Language Course Program
Nucleo - Our learning platform of courses
Extended Parental Leave
Daycare Allowance
Parental Consultancy
Work-from-home Allowance
Gym Partnerships
30 days of paid vacation
Relocation Assistance Package, if applicable
Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.
To maintain a consistent and fair process for every candidate, Nu does not provide individualized technical feedback. See how our policy works here