Get AI match insights
See your fit score & personalized tips.
Own the day‑to‑day operational support for Nu’s PCI DSS and related certifications, interpreting requirements, coordinating recurring tests, managing audit findings and action‑plan tracking, and partnering with product, engineering and IT to embed compliance controls.
A security professional with hands‑on experience managing PCI/DSS (and similar) certifications, solid knowledge of frameworks such as SOC2, NIST, DORA, experience in cloud environments (AWS/GCP/Azure), strong analytical and communication skills, and fluency in English (Spanish a plus).
The role ensures Nu stays compliant with regulatory and internal standards across multiple countries, mitigates risk, and provides leadership with reliable security insights so the company can grow safely and maintain customer trust.
Candidates who thrive at the intersection of security and business, enjoy coordinating audits and remediation, excel in cross‑functional collaboration, and have a track record of delivering compliance outcomes in regulated or fintech settings.
About Nu
Nu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.
Proprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability.
Visit our Institutional Page
About the role
The Governance, Risk and Compliance (GRC) team enables Nubank to remain compliant with legal, regulatory, and internal requirements, while continuously identifying, classifying, and monitoring risks and providing strategic insights and performance evaluation to leadership. We collaborate with multidisciplinary teams to align our technology security strategy with Nubank’s overall business objectives, embedding security in business decisions so that Nubank can grow safely.
We make sure identified risks are mitigated and that leaders, inside and outside the IT and Security Business Unit, can make decisions based on risk. The focus of the security compliance squad is to ensure Nubank complies with regulations across countries and entities, and holds PCI DSS certifications, alongside other frameworks.
You will be responsible for
We are looking for a person who has
Location for this opportunity (City, Country)
Work Model for this Role
Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/
Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.
To maintain a consistent and fair process for every candidate, Nu does not provide individualized technical feedback. See how our policy works here
Nubank
Full employer profile →