AI Risk Management Senior Specialist

About Nu

Nu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.

Proprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability. Visit our Institutional Page

About the Role

This position sits within Nubank’s global risk management team and provides second-line oversight of risks arising from artificial intelligence and generative AI across the company. You will partner with AI Core, Engineering, Data, Information Security and other first-line teams from the earliest stages of initiatives, while maintaining independent challenge and accountability for risk governance.

The initial focus is to establish scalable AI risk oversight across the company, including risk assessments on cutting edge technologies, providing risk taxonomy, appetite, KRIs, risk and control matrices, control testing, incident oversight, and issue management. You’ll be Responsible for

Shift-left risk management by partnering with the first line at the conception and design of AI initiatives, helping teams identify risks and shape proportionate response strategies.

Recommend and maintain the AI risk appetite statement, metrics, KRIs, and early-warning indicators, including thresholds and escalation logic.

Oversee risks introduced by AI and GenAI third-party providers, recommending governance requirements and baseline controls for their safe use.

Enforce consistent risk identification, recommend baseline controls, and independently test key controls.

Own control testing for AI-related scopes, prioritising the highest risks and most important controls.

Oversee AI-related incidents, connect them to risk governance, and feed lessons learned back into the taxonomy, controls, appetite, and monitoring approach.

Review and challenge first-line risk assessments, controls, and decisions.

Build strong working relationships with Model Risk, Information Security, Data Privacy, Technology Risk, Operational Risk, and other relevant risk teams to clarify roles, coordinate oversight, and avoid gaps or duplication.

What We're Looking For Someone Who Has

Senior experience in technology, ideally in a second-line risk function or a risk-heavy technical role.

Fluency with GenAI and large language models, including the AI lifecycle and the non-model risks associated with data, access, resilience, third parties, agentic tool use, and guardrails.

Strong grounding in core risk practices, including risk assessments, control testing, and risk monitoring.

Familiarity with relevant governance, risk, and security frameworks, such as NIST AI RMF, the EU AI Act, NIST CSF, ISO/IEC 27001, and ISO 31000, with the judgment to apply them pragmatically.

A mindset of constructively challenging, and being able to partner with other teams to elaborate resilient and secure solutions.

Excellent communication and stakeholder management skills, with confidence engaging senior leaders and presenting a clear risk picture in governance forums.

Strong analytical, problem-solving, and decision-making skills, including the ability to address complex and ambiguous situations.

A pragmatic, builder’s mentality: comfortable standing up new frameworks and processes, operating with ambiguity, and balancing strong controls with simplicity and speed.

Strong team-working skills and the ability to build trust across functions, geographies, and lines of defense.