{"id":3105843,"url":"https://alion.io/job/nubank-senior-security-engineer-grc-pci","title":"Senior Security Engineer - GRC (PCI)","company":{"id":13935,"name":"Nubank","domain":"nubank.com.br","url":"https://alion.io/company/nu-bank","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":99,"open_postings":13,"ghost_share":0,"stale_share":0,"repost_share":0.077,"time_to_fill_p50_days":37,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["São Paulo, Brazil","Campinas, Brazil","Belo Horizonte, Brazil","Rio de Janeiro, Brazil"],"countries":["BR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":58000,"max_usd":133000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-22T17:26:08Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-27T15:14:50Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"About Nu\nNu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.\nProprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability.\nVisit ourInstitutional Page\nAbout the role\nThe Governance, Risk and Compliance (GRC) team enables Nubank to remain compliant with legal, regulatory, and internal requirements, while continuously identifying, classifying, and monitoring risks and providing strategic insights and performance evaluation to leadership. We collaborate with multidisciplinary teams to align our technology security strategy with Nubank’s overall business objectives, embedding security in business decisions so that Nubank can grow safely.\nWe make sure identified risks are mitigated and that leaders, inside and outside the IT and Security Business Unit, can make decisions based on risk. The focus of the security compliance squad is to ensure Nubank complies with regulations across countries and entities, and holds PCI DSS certifications, alongside other frameworks.\nYou will be responsible for\nProvide operational support and act as a focal point for the assigned certification scope.\n\nInterpret certification requirements applicable to your scope and execute and coordinate recurring tests required by the certification.\n\nRegister, manage, and track action plans arising from audit findings or identified gaps.\n\nMaintain a day-to-day interface with audited and external teams on control implementation, scope alignment, evidence collection, and deadline agreement.\n\nPropose and implement improvements in internal certification processes.\n\nBuild and maintain strong partnerships with product, engineering and IT teams to make audits and assessments smoother and less disruptive.\n\nCollaborate with Engineering, Product, IT and global teams to integrate compliance requirements into processes and systems.\n\nWe are looking for a person who has\nSolid knowledge across cybersecurity domains and frameworks such as PCI DSS, SOC2, DORA, NIST and similar standards.\n\nPrior experience supporting security certification or audit processes, including end-to-end management, scoping, and evidence collection.\n\nExperience with internal controls, compliance functions, and action plans follow up arising from audit findings or identified gaps.\n\nExperience evaluating and implementing controls in cloud environments (for example AWS, GCP, Azure).\n\nStrong analytical skills to interpret complex data and turn findings into actionable insights.\n\nStrong communication skills to translate complex technical concepts.\n\nComfort using AI and automation as the default way of working, while validating outputs critically.\n\nAdvanced English, written and spoken, for work with global teams and external assessors. Spanish is a plus.\n\nNice to have\nCertifications such as PCI ISA or PCIP, CISA, CISM or CISSP.\n\nExperience in a regulated fintech or financial services environment.\n\nExperience with multi country or multi entity certification programs.\n\nLocation for this opportunity (City, Country)\nSão Paulo, Brazil\n\nCampinas, Brazil\n\nRio de Janeiro, Brazil\n\nBelo Horizonte, Brazil\n\nBenefits\nChance of earning equity at Nubank\n\nFood/ Meal Card (Vale-Refeição and/or Vale Alimentação)\n\nPublic Transportation Commuting Benefit (Vale-Transporte)\n\nNuCare - Psychological, Financial and Legal Assistance Program\n\nLife Insurance\n\nMedical Plan\n\nDental Plan\n\nNuLanguage - Language Course Program\n\nNucleo - Our learning platform of courses\n\nExtended Parental Leave\n\nDaycare Allowance\n\nParental Consultancy\n\nWork-from-home Allowance\n\nGym Partnerships\n\n30 days of paid vacation\n\nRelocation Assistance Package, if applicable\n\nWork Model for this Role\nHybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/\nOur recruitment process may involve the use of artificial intelligence-enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.\nTo maintain a consistent and fair process for every candidate, Nu does not provide individualized technical feedback. See how our policy works here","description_format":"text","description_chars":4642,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Equity","Hybrid work","Life insurance","Parental leave","Relocation assistance"],"hiring_locations":[{"name":"Brazil","iso":"BR","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Financial Services","Cards & Card Issuing","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-10-22T19:09:42Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":37,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/nubank-senior-security-engineer-grc-pci","json_url":"https://alion.io/job/nubank-senior-security-engineer-grc-pci.json","meta":{"generated_at":"2026-10-27T15:38:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4537,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13935},"rest":"https://alion.io/mcp/rest/get_company?id=13935"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnubank-senior-security-engineer-grc-pci"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnubank-senior-security-engineer-grc-pci"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnubank-senior-security-engineer-grc-pci"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nubank-senior-security-engineer-grc-pci\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnubank-senior-security-engineer-grc-pci"}]}