About Nu
Nu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.
Proprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability.
Visit our Institutional Page
About the Role
The Operational Risk Specialist, plays a vital role within the operational risk management function at Nu Mexico. The main duties involve identifying, assessing, monitoring, and mitigating operational risks that may hinder the company from reaching its objectives. This is accomplished by developing methodologies and ensuring their implementation and execution within the first line of defense. This process includes training, review and challenge, monitoring key risk indicators, and escalating issues in appropriate Risk Forums. This role involves close collaboration with different departments and teams to execute various Operational Risk programs aimed at reducing and controlling the likelihood and impact of adverse operational risk events.
You’ll be Responsible for
- Lead the oversight and continuous improvement of the Op Risk Management System, ensuring that policies, methodologies, procedures, governance practices, and supporting documentation remain aligned with local regulation and global standards.
- Lead and coordinate the annual and continuous RCSA process, maintaining high-quality risk and control matrices by ensuring that operational risks are properly identified, documented, classified, assigned to processes and business lines, and linked to accountable owners and controls.
- Perform independent 2LoD review and challenge of 1LoD risk assessments and controls, including the evaluation of inherent risk, residual risk, control design, control execution, supporting evidence, and overall control effectiveness.
- Own the governance and periodic maintenance of risk matrices across macroprocesses, ensuring that changes in products, processes, regulations, systems, incidents, control gaps, and organizational priorities are properly reflected, documented, and traceable in the institutional risk inventory.
- Assess complex operational risks and define appropriate treatment strategies based on inherent and residual risk exposure, risk appetite, and tolerance thresholds, including mitigation plans, risk transfers, formal risk acceptances, and escalation of risks outside tolerance.
- Monitor operational loss events, incidents, and control gaps; lead or support root cause analysis; ensure accurate and timely registration; and define corrective, preventive, and improvement actions to reduce the likelihood of recurrence.
- Design, manage, and enhance the Key Risk Indicator program for priority operational risks, ensuring that each applicable risk in the RCM has measurable indicators, defined amber and red thresholds, reliable data sources, periodic monitoring, documented analysis, and appropriate escalation.
- Evaluate operational risks associated with new products, features, processes, operational changes, and other initiatives, ensuring that potential control gaps are identified, mitigation plans are defined, and required actions are completed before launch or formal implementation.
- Prepare and present accurate, well-structured risk reports, dashboards, and management materials for senior leadership, the Non-Financial Risk Technical Forum, the Risk Committee, and other governance bodies, ensuring consistency and traceability to the RCM, loss-event database, KRI inventory, and control-gap management tools.
- Operate with limited direct supervision and act as a subject matter expert, providing strategic guidance, training, and constructive challenge to business areas and specialized risk teams while escalating material residual risks, control weaknesses, and non-compliance issues to the appropriate governance forums.
What We're Looking For Someone Who Has
Required
- Bachelor’s degree in Business Administration, Industrial Engineer, Risk Management or related field.
- Minimum of 3+ years experience in operational risk management, internal audit, compliance, consulting.
- Strong knowledge of the operational risk management frameworks (RCSA, Loss Database, Third Party Risk Management, Risk assessment of new products, etc).
- Strong regulatory knowledge
- Excellent analytical, communication, and problem-solving skills.
- Ability to work independently and collaboratively with cross-functional teams
- Ability to work with databases, ETL
- Experience with regulatory compliance and corporate governance standards.
- Strong knowledge of Control Testing and Monitoring throughout substantive testing and Key Risk Indicators (KRIs).
- Experience with Governance, Risk and Compliance (GRC) systems.
- Demonstrated ability to thrive in a fast-paced, rapidly evolving environment and adapt quickly to shifting priorities and changes in processes or regulations.
- Fluent in English is a must.
Work Setup
Location
Mexico City, Mexico
Work model
[Hybrid / On-Site]
Office requirement
2 - 3 days per week at the office.
Benefits & perks
Mexico Jobs
- Chance of earning equity at Nubank - [Reminder: Ops Teams don't have equity];
- NuCare – Psychological, Financial and Legal Assistance Program
- NuLanguage – Language Course Program
- Nucleo - Our learning platform of courses
- Holiday Bonus ("Aguinaldo") of 30 days of pay per year
- 17 days of paid vacation with 25% vacation bonus
- Relocation Assistance Package, if applicable
Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.
To maintain a consistent and fair process for every candidate, Nu does not provide individualized technical feedback. See how our policy works here
