IT Risk Senior Analyst

About Nubank: Nubank was founded in 2013 to free people from a bureaucratic, slow, and inefficient financial system. Since then, through innovative technology and outstanding customer service, the company has been redefining people\'s relationships with money across Latin America. With operations in Brazil, Mexico, and Colombia, Nubank is one of the world\'s largest digital banking platforms and technology-leading companies. Today, Nubank is a global company with offices in São Paulo (Brazil), Mexico City (Mexico), Buenos Aires (Argentina), Bogotá (Colombia), Durham (United States), and Berlin (Germany). It was founded in 2013 in Sao Paulo by Colombian David Vélez, and cofounded by Brazilian Cristina Junqueira and American Edward Wible.

About the team: IT Risk Team is part of the Risk Management Tribe at Nubank, responsible for identifying and managing technology and information security risks across information technology systems, including microservices and processes. IT Risk Management helps the business identify threats and vulnerabilities to mitigate information technology risks that could impact data confidentiality, integrity, and availability.

About the role: In the role of the IT Risk Senior Analyst, you will play a crucial part in ensuring the security, compliance, and overall risk management of our organization\'s information technology systems, including microservices and processes. As a senior IT Risk member and part of the second line of defense, you will work in partnership with Business Units, lead risk assessment initiatives, implement risk mitigation strategies, and collaborate with cross-functional teams to maintain a robust IT Risk management framework.

• Conduct comprehensive risk assessments across various IT domains, identifying potential vulnerabilities, threats, and impacts. Analyze risks to determine their significance and develop insights for senior management.
• Develop and implement effective risk mitigation strategies that align with business objectives and regulatory requirements (e.g., for BCB: Res. 85 and 4893; for Investments: CVM 035, CVM 021, and PQO). Collaborate with relevant stakeholders to ensure successful execution of risk management initiatives.
• Monitor regulatory changes and industry best practices to ensure IT risk management practices remain compliant. Assist in the development and enforcement of IT risk management policies and procedures.
• Collaborate with incident response teams to develop plans for handling and recovering from IT security incidents. Participate in post-incident analysis and recommend improvements to prevent future occurrences.
• Communicate complex IT risk issues and solutions to both technical and non-technical stakeholders. Prepare metrics, reports, and updates for senior management and executive leadership.
• Drive continuous improvement in IT risk management processes. Identify opportunities to enhance procedures, tools, and methodologies to adapt to evolving risk landscapes.
• Provide guidance and mentorship to junior members of the IT risk team. Support their professional development by sharing expertise and knowledge.

• Minimum of 5 years of relevant experience in cybersecurity or IT Risk Management, with a focus on risk assessment, analysis, and mitigation.
• Bachelor\'s degree in Information Security, Computer Science, or a related field. Master\'s degrees or relevant certifications (e.g., CISA, CISSP, CRISC, and/or others) are a plus.
• In-depth understanding of information security principles, risk frameworks, and regulatory compliance (e.g., NIST, LGPD, ISO 27001).
• Analytical and problem-solving skills, with the ability to translate complex technical information into clear business insights.
• Strong knowledge of technology environments, including information security, identity and access management, and cloud-native environments (e.g., AWS and GCP).
• Advanced English communication skills, both written and verbal.

• Health, dental, and life insurance
• Transportation assistance
• 30 days of paid vacation
• Chance of earning equity at Nubank
• Parking partnership - discounted parking in our office
• Free bike parking with showers available
• NuCare - Our mental health and wellness assistance program
• Extended maternity and paternity leaves
• Child care allowance
• Onsite Health Center - Medical support for every Nubanker in our office

Diversity and Inclusion at Nubank
We want to have a product for everyone, and we build strong and diverse teams that rise to the challenge. We are a team of the most creative people in technology, and we hire with equal opportunity, irrespective of gender, ethnicity, religion, sexual orientation, or background. We are a very process-light organization that values human interactions, and that is an essential part of our culture.

At Nubank, everyone has the opportunity to speak up and participate, grow, and share ideas.

To apply, please submit your resume and cover letter through the appropriate Nubank careers portal. This section has been refined to remove form fields from the original description.