AI Risk Management Senior Specialist
Nubank · São Paulo, Brazil · 1mo ago
About Nu
Nu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.
Proprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability.
Visit our Institutional Page
About the Role
This position sits within Nubank’s global risk management team and provides second-line oversight of risks arising from artificial intelligence and generative AI across the company. You will partner with AI Core, Engineering, Data, Information Security and other first-line teams from the earliest stages of initiatives, while maintaining independent challenge and accountability for risk governance.
The initial focus is to establish scalable AI risk oversight across the company, including risk assessments on cutting edge technologies, providing risk taxonomy, appetite, KRIs, risk and control matrices, control testing, incident oversight, and issue management.
You’ll be Responsible for
Shift-left risk management by partnering with the first line at the conception and design of AI initiatives, helping teams identify risks and shape proportionate response strategies.
Recommend and maintain the AI risk appetite statement, metrics, KRIs, and early-warning indicators, including thresholds and escalation logic.
Oversee risks introduced by AI and GenAI third-party providers, recommending governance requirements and baseline controls for their safe use.
Enforce consistent risk identification, recommend baseline controls, and independently test key controls.
Own control testing for AI-related scopes, prioritising the highest risks and most important controls.
Oversee AI-related incidents, connect them to risk governance, and feed lessons learned back into the taxonomy, controls, appetite, and monitoring approach.
Review and challenge first-line risk assessments, controls, and decisions.
Build strong working relationships with Model Risk, Information Security, Data Privacy, Technology Risk, Operational Risk, and other relevant risk teams to clarify roles, coordinate oversight, and avoid gaps or duplication.
What We're Looking For Someone Who Has
Senior experience in technology, ideally in a second-line risk function or a risk-heavy technical role.
Fluency with GenAI and large language models, including the AI lifecycle and the non-model risks associated with data, access, resilience, third parties, agentic tool use, and guardrails.
Strong grounding in core risk practices, including risk assessments, control testing, and risk monitoring.
Familiarity with relevant governance, risk, and security frameworks, such as NIST AI RMF, the EU AI Act, NIST CSF, ISO/IEC 27001, and ISO 31000, with the judgment to apply them pragmatically.
A mindset of constructively challenging, and being able to partner with other teams to elaborate resilient and secure solutions.
Excellent communication and stakeholder management skills, with confidence engaging senior leaders and presenting a clear risk picture in governance forums.
Strong analytical, problem-solving, and decision-making skills, including the ability to address complex and ambiguous situations.
A pragmatic, builder’s mentality: comfortable standing up new frameworks and processes, operating with ambiguity, and balancing strong controls with simplicity and speed.
Strong team-working skills and the ability to build trust across functions, geographies, and lines of defense.
Bachelor’s degree in Computer Science, Engineering, Information Systems, Risk Management, Business, or a related field.
Significant experience in technology areas, risk management, AI implementation and governance or a related discipline.
Demonstrated experience translating technical or emerging risks into practical governance, policies, controls, metrics, and testing approaches.
Experience working with senior stakeholders and cross-functional teams in a fast-moving, technology-led organisation.
Experience operating across multiple countries or regulatory environments is a plus.
Professional fluency in English is expected.
Location
São Paulo, SP - Brazil
Work model
Hybrid
Office requirement
2-3 days per week at the office.
Our Benefits
Chance of earning equity at Nubank
Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
Public Transportation Commuting Benefit (Vale-Transporte)
NuCare – Psychological, Financial and Legal Assistance Program
Life Insurance
Medical Plan
Dental Plan
NuLanguage – Language Course Program
Nucleo - Our learning platform of courses
Extended Parental Leave
Daycare Allowance
Parental Consultancy
Work-from-home Allowance
Gym Partnerships
30 days of paid vacation
Relocation Assistance Package, if applicable
Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.
To maintain a consistent and fair process for every candidate, Nu does not provide individualized technical feedback. See how our policy works here