Operational Risk Specialist (BCM & TPRM)

About Nu Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services. Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns. Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks. Visit our institutional page: https://www.nu.com/2026-en About Us Nu is one of the largest digital financial platforms in the world, with more than 127 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building. Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human. Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/ About the role As an Operational Risk Specialist , your mission is to ensure that our operations and critical third parties are properly assessed, monitored, and managed. You will act as a guardian of our resilience strategy, providing oversight and a high-level technical challenge to business areas to maintain operational continuity and regulatory compliance. Beyond technical oversight, you will play a strategic orchestration role, connecting Business units, Procurement, and Risk assessment teams. Your goal is to ensure the third-party lifecycle is safe, efficient, and standardized, maintaining our competitive edge and long-term success. You'll be responsible for BCM Oversight (Brazil Scope): Overseeing the Business Continuity Plan (BCP) for Brazil, including the critical review and challenge of Business Impact Analysis (BIA) and Operational Continuity Plans (OCP and Disaster Recovery). Testing & Validation: Monitoring the execution of continuity tests to validate that recovery capabilities meet both local and global standards. Risk Governance & RAS: Executing and monitoring the Risk Acceptance Statement (RAS) monthly, ensuring all resilience metrics are accurately tracked. Third-Party Resilience: Ensuring that critical vendors are properly monitored and managed throughout their lifecycle, mitigating risks that could impact our operational stability. Cross-Functional Coordination: Acting as the bridge between Procurement, Business areas, and Risk teams to ensure a standardized and secure third-party integration process. Regulatory & Audit Interface: Supporting internal/external audits and regulators (BACEN, CVM, ANBIMA) by providing technical evidence and defending our continuity and TPRM framework. We are looking for a person who has Experience in Business Continuity Management and a solid understanding of risk frameworks within the financial services or banking industry. Solid experience in the second line of defense (2LoD), focusing on the review, challenge, and oversight of the Business Continuity and Third-Party Risk Management lifecycles. Self-driven and thrive in fast-paced environments, with a passion for collaborating across various departments and international borders. Strong knowledge of Brazilian regulations (BACEN, CVM, and ANBIMA) and their specific requirements for operational resilience and vendor oversight. Ability to translate complex technical information into clear business insights for executive-level reporting. Experience in supporting Internal/External Audits and Regulators, providing high-quality technical justifications and evidence within deadlines. Advanced English: Ability to interact and align daily with stakeholders from diverse geographies in English, ensuring local requirements are integrated into global policies. Clear and objective communication skills, with the ability to present findings to executive leadership and local forums. A proactive, self-driven mindset to take full ownership of the BCM review calendar, issue monitoring, and short-term deliverables. Experience or knowledge in Third-Party Risk Management is a plus, specifically regarding vendor resilience. Location for this opportunity (City, Country) São Paulo, Brazil Our Benefits Chance of earning equity at Nubank Food/ Meal Card (Vale-Refeição and/or Vale Alimentação) Public Transportation Commuting Benefit (Vale-Transporte) NuCare – Psychological, Financial and Legal Assistance Program Life Insurance Medical Plan Dental Plan NuLanguage – Language Course Program Nucleo - Our learning platform of courses Extended Parental Leave Daycare Allowance Parental Consultancy Work-from-home Allowance Gym Partnerships 30 days of paid vacation Relocation Assistance Package, if applicable Work Model for this Role Hybrid 2-3 times/week : Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/ Explore how we build technology at Nubank: 🔗 building.nubank.com.br ↗ 🎥 youtube.com/@building.nubank ↗ 🎧 Listen to our stories on Spotify ↗ By submitting an application, I acknowledge that I have read and understand the Nubank Candidate Privacy Notice. Nubank Candidate Privacy Notice (English / Portuguese / Spanish).