Finjobsly Logo
FJ
Finjobsly
HomeBrowse JobsBlogPost JobSalary Benchmark
IntelligenceAnalyze My CVAnalyze CV
Log InSign Up
  1. Home
  2. /
  3. Fintech Jobs
  4. /
  5. Software Engineering Jobs
  6. /
  7. Lead Security Engineer - GRC
Finjobsly Logo
FJ
Finjobsly

AI-powered fintech job platform connecting financial professionals with the right opportunities in the evolving financial technology landscape.

Product

  • Features
  • Browse Jobs
  • All Jobs

For Employers

  • Post a Job
  • Pricing for Employers

Company

  • About Us
  • Partners
  • Contact Us
  • Blog

Resources

  • Help Center
  • Privacy Policy
  • Terms of Service

© 2026 Finjobsly. All rights reserved.

Connecting finance professionals with fintech opportunities

Finjobsly on PeerPush
Nubank logoN
NubankEngineerRemote

Lead Security Engineer - GRC

São PauloFull-timeLeadSalary: Not disclosed
Posted Oct 22, 2026Deadline: Nov 21, 2026
Job SnapshotActively hiring
LocationSão Paulo
Job typeFull-time
SalaryNot disclosed
DeadlineNov 21, 2026

Finjobsly Role Intelligence

Experience level
Lead
Work style
Remote
Visa sponsorship
Not specified
Salary
Not disclosed
Key skills
GoAWSGCPAzureRisk Management

Get AI match insights

See your fit score & personalized tips.

Sign In Now
Finjobsly Intelligence— Generated from the employer's job description

What you'll own

Assess security gaps across technologies and third parties, define remediation plans, and lead the evolution of Nu’s third‑party risk management program while building automation and AI‑assisted assessment tools.

What they're looking for

A senior security professional with proven experience designing controls, conducting quantitative and qualitative risk analysis, running TPRM and security‑awareness programs, and working in large‑scale cloud environments using frameworks like NIST and ISO.

Why this role matters

The role safeguards Nu’s digital platform and rapid growth across Brazil, Mexico, Colombia and beyond by turning complex risk data into actionable decisions for leadership and scaling security without adding headcount.

Fintech requirements

Visa sponsorship: No
Work arrangement: remote

About this role

About Nu

Nu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.

Proprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability.

Visit our Institutional Page

About the role

As a Lead Security Engineer you will be a senior technical and risk reference who moves where the risk is, across TPRM, Security Awareness and Cyber Risk, rather than owning a single silo. You will assess security gaps across diverse technologies, third parties and business contexts, quantify what matters, and turn it into prioritized, actionable treatment plans that leadership can decide on.

You will build and evolve the policies, methodologies, platforms and automation behind these programs, and help the squad scale across Brazil, Mexico, Colombia, and other geos without scaling headcount linearly. You will partner with Engineering, Product, Legal, Procurement, Operations, Internal Communication, Risk teams and the business stakeholders to translate requirements into clear, pragmatic technical specifications. This is a multidisciplinary and global role, working with teams primarily based in Brazil, Mexico, Colombia, and the United States.

You will be responsible for

  • Assess security gaps across business processes and technologies, enable effective risk treatment, and define remediation plans with clear owners and deadlines.
  • Work closely with ITSec, Risk, Procurement stakeholders to align on mitigation of identified risks and on risk acceptance decisions.
  • Lead the evolution of the TPRM program toward a risk-based, lifecycle model: onboarding, continuous monitoring, offboarding, and fourth-party visibility.
  • Define/review security requirements for third parties, including contractual security clauses and annexes, and guide business owners on their application.
  • Build and scale automation and AI-assisted assessment capabilities that reduce manual questionnaire effort and increase coverage.
  • Report third-party risk posture and trends to leadership and relevant committees.
  • Drive human risk programs through phishing simulations, training and communication and evaluate and evolve the tooling behind them (build versus buy).
  • Define and track behavior-change metrics that go beyond completion rates, and report them through dashboards for management.
  • Act as technical lead across the squad, raising the technical and analytical bar and fostering continuous improvement.

We are looking for a person who has

  • Proven experience designing and implementing security controls and leading risk management initiatives, with strong knowledge of domains and concepts of cyber risks.
  • Hands-on experience with risk analysis techniques: risk identification, assessment and prioritization, using both qualitative and quantitative methods.
  • Experience with TPRM (third-party risk management).
  • Experience building or running security awareness and human-risk programs, or a strong ability to ramp up on them quickly.
  • Experience with large-scale distributed environments and cloud environments (e.g. AWS, GCP, Azure).
  • Familiarity with frameworks such as NIST CSF, NIST SP 800-30, ISO 27001/27002/27005, ISO 31000, PCI-DSS, ITIL, COBIT and similar.
  • Excellent executive communication skills, able to translate complex topics into clear, actionable insights for senior leadership and committees.
  • Technical background and comfort with automation, scripting and AI or LLM-based tooling to scale security processes.
  • Experience operating in regulated and global environments, including interaction with auditors and regulators.
  • Proven ability to lead projects and process improvement initiatives, and to mentor other engineers and analysts.
  • Advanced English proficiency, written and spoken. Spanish is a plus.

Nice to have

  • Bachelor’s degree in Engineering, Technology, Information Security, Risk Management or related fields.
  • Certifications such as PCI ISA or PCIP, CISA, CISM or CISSP.
  • Experience in a regulated fintech, financial services environment or consulting roles.
  • Experience with AI risk: assessing risks of generative AI and LLM use cases (data leakage, prompt injection, model and vendor risk)

Location for this opportunity (City, Country)

  • São Paulo, Brazil
  • Campinas, Brazil
  • Rio de Janeiro, Brazil
  • Belo Horizonte, Brazil

Benefits & perks

  • Chance of earning equity at Nubank
  • Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
  • Public Transportation Commuting Benefit (Vale-Transporte)
  • NuCare – Psychological, Financial and Legal Assistance Program
  • Life Insurance
  • Medical Plan
  • Dental Plan
  • NuLanguage – Language Course Program
  • Nucleo - Our learning platform of courses
  • Extended Parental Leave
  • Daycare Allowance
  • Parental Consultancy
  • Work-from-home Allowance
  • Gym Partnerships
  • 30 days of paid vacation
  • Relocation Assistance Package, if applicable

Work Model for this Role

Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/

Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.

To maintain a consistent and fair process for every candidate, Nu does not provide individualized technical feedback. See how our policy works here

More about this role

About company

Nubank logoN

Nubank

Full employer profile →

Required skills

GoAWSGCPAzureRisk Management

Explore more

More Software Engineering Jobs→More jobs at Nubank→Go jobs →AWS jobs →Salary benchmarks for this role →Browse all fintech jobs →

Nubank

Lead Security Engineer - GRC

São PauloSalary: Not disclosed

Company insights

40

Happiness score

40/100

Based on 30 verified employee signals

Nubank launches in the U.S. and introduces Nu Global

Nu began U.S. operations with deposit and credit-card products and launched Nu Global, a multi-currency account supporting fee-free transfers across more than 35 countries.

September 2026From the webNubank Newsroom→

Nubank posts first quarter with net income above $1 billion

Nubank reported Q2 2026 net income of $1.1 billion, up 49% year over year, on nearly $5.9 billion in gross revenue. Its global customer base reached 139 million.

August 2026From the webNubank Newsroom→

Livia Chanes named CEO for Latin America

Livia Chanes expanded her remit to lead Nubank's Latin American operations while remaining CEO of Nubank Brazil. The heads of its Mexico and Colombia businesses now report to her.

July 2026From the webNubank Newsroom→

Nubank appoints former Visa executive Rob Livingston as CFO

Rob Livingston became CFO effective July 13, succeeding Guilherme Lago, who moved into an advisory role. Livingston previously served as Visa's CFO for North America.

mid-2026From the webNubank Newsroom→

AI Generated Insights