{"id":3105844,"url":"https://alion.io/job/nubank-lead-security-engineer-grc","title":"Lead Security Engineer - GRC","company":{"id":13935,"name":"Nubank","domain":"nubank.com.br","url":"https://alion.io/company/nu-bank","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":99,"open_postings":14,"ghost_share":0,"stale_share":0,"repost_share":0.071,"time_to_fill_p50_days":39,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["São Paulo, Brazil","Campinas, Brazil","Belo Horizonte, Brazil","Rio de Janeiro, Brazil"],"countries":["BR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":59000,"max_usd":154000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITIL","optional":false},{"name":"LLM","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false}],"status":"live","first_seen_at":"2026-10-22T17:00:00Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-26T16:50:47Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"About Nu\nNu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.\nProprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability.\nVisit ourInstitutional Page\nAbout the role\nAs a Lead Security Engineer you will be a senior technical and risk reference who moves where the risk is, across TPRM, Security Awareness and Cyber Risk, rather than owning a single silo. You will assess security gaps across diverse technologies, third parties and business contexts, quantify what matters, and turn it into prioritized, actionable treatment plans that leadership can decide on.\nYou will build and evolve the policies, methodologies, platforms and automation behind these programs, and help the squad scale across Brazil, Mexico, Colombia, and other geos without scaling headcount linearly. You will partner with Engineering, Product, Legal, Procurement, Operations, Internal Communication, Risk teams and the business stakeholders to translate requirements into clear, pragmatic technical specifications. This is a multidisciplinary and global role, working with teams primarily based in Brazil, Mexico, Colombia, and the United States.\nYou will be responsible for\nAssess security gaps across business processes and technologies, enable effective risk treatment, and define remediation plans with clear owners and deadlines.\n\nWork closely with ITSec, Risk, Procurement stakeholders to align on mitigation of identified risks and on risk acceptance decisions.\n\nLead the evolution of the TPRM program toward a risk-based, lifecycle model: onboarding, continuous monitoring, offboarding, and fourth-party visibility.\n\nDefine/review security requirements for third parties, including contractual security clauses and annexes, and guide business owners on their application.\n\nBuild and scale automation and AI-assisted assessment capabilities that reduce manual questionnaire effort and increase coverage.\n\nReport third-party risk posture and trends to leadership and relevant committees.\n\nDrive human risk programs through phishing simulations, training and communication and evaluate and evolve the tooling behind them (build versus buy).\n\nDefine and track behavior-change metrics that go beyond completion rates, and report them through dashboards for management.\n\nAct as technical lead across the squad, raising the technical and analytical bar and fostering continuous improvement.\n\nWe are looking for a person who has\nProven experience designing and implementing security controls and leading risk management initiatives, with strong knowledge of domains and concepts of cyber risks.\n\nHands-on experience with risk analysis techniques: risk identification, assessment and prioritization, using both qualitative and quantitative methods.\n\nExperience with TPRM (third-party risk management).\n\nExperience building or running security awareness and human-risk programs, or a strong ability to ramp up on them quickly.\n\nExperience with large-scale distributed environments and cloud environments (e.g. AWS, GCP, Azure).\n\nFamiliarity with frameworks such as NIST CSF, NIST SP 800-30, ISO 27001/27002/27005, ISO 31000, PCI-DSS, ITIL, COBIT and similar.\n\nExcellent executive communication skills, able to translate complex topics into clear, actionable insights for senior leadership and committees.\n\nTechnical background and comfort with automation, scripting and AI or LLM-based tooling to scale security processes.\n\nExperience operating in regulated and global environments, including interaction with auditors and regulators.\n\nProven ability to lead projects and process improvement initiatives, and to mentor other engineers and analysts.\n\nAdvanced English proficiency, written and spoken. Spanish is a plus.\n\nNice to have\nBachelor’s degree in Engineering, Technology, Information Security, Risk Management or related fields.\n\nCertifications such as PCI ISA or PCIP, CISA, CISM or CISSP.\n\nExperience in a regulated fintech, financial services environment or consulting roles.\n\nExperience with AI risk: assessing risks of generative AI and LLM use cases (data leakage, prompt injection, model and vendor risk)\n\nLocation for this opportunity (City, Country)\nSão Paulo, Brazil\n\nCampinas, Brazil\n\nRio de Janeiro, Brazil\n\nBelo Horizonte, Brazil\n\nBenefits\nChance of earning equity at Nubank\n\nFood/ Meal Card (Vale-Refeição and/or Vale Alimentação)\n\nPublic Transportation Commuting Benefit (Vale-Transporte)\n\nNuCare - Psychological, Financial and Legal Assistance Program\n\nLife Insurance\n\nMedical Plan\n\nDental Plan\n\nNuLanguage - Language Course Program\n\nNucleo - Our learning platform of courses\n\nExtended Parental Leave\n\nDaycare Allowance\n\nParental Consultancy\n\nWork-from-home Allowance\n\nGym Partnerships\n\n30 days of paid vacation\n\nRelocation Assistance Package, if applicable\n\nWork Model for this Role\nHybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/\nOur recruitment process may involve the use of artificial intelligence-enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.\nTo maintain a consistent and fair process for every candidate, Nu does not provide individualized technical feedback. See how our policy works here","description_format":"text","description_chars":5801,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Equity","Hybrid work","Life insurance","Parental leave","Relocation assistance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"Brazil","iso":"BR","kind":"country"},{"name":"Colombia","iso":"CO","kind":"country"},{"name":"Mexico","iso":"MX","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Financial Services","Cards & Card Issuing","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-10-22T19:09:42Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":39,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/nubank-lead-security-engineer-grc","json_url":"https://alion.io/job/nubank-lead-security-engineer-grc.json","meta":{"generated_at":"2026-10-26T19:36:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":75,"day_limit":5000,"remaining_today":4925,"minute_limit":60,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13935},"rest":"https://alion.io/mcp/rest/get_company?id=13935"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnubank-lead-security-engineer-grc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnubank-lead-security-engineer-grc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnubank-lead-security-engineer-grc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nubank-lead-security-engineer-grc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnubank-lead-security-engineer-grc"}]}