Nubank

More roles at Nubank

Senior Security Engineer - GRC (PCI)

Hybrid

Part remote, part office, you need to live within commuting distance of a named location.

Hybrid · São Paulo

Employer listed it 5 days ago · Added 2 days ago

First listed 5 days ago and still open.

Salary

Not stated

Location

Hybrid · São Paulo

Timezone

Not stated

Contract

Full-time

Experience

Senior

What the advert says

Quoted word for word from the employer's advert. Where it says nothing, we say so.

Working hours: Not mentioned in the advert
Where you can work from: Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration.
Contract: Not mentioned in the advert
Experience asked for: Not mentioned in the advert
Pay: Not mentioned in the advert

Remote flexibility

Hybrid

This role is only partly remote, the employer expects time in the office around São Paulo, Campinas, Belo Horizonte, Rio de Janeiro, Hybrid, so you need to live within commuting distance.

What the employer says

Source listing states candidate location: "São Paulo, Campinas, Belo Horizonte, Rio de Janeiro, Hybrid"
Listing mentions "Hybrid"

What Nomaders makes of it

Not suitable if you plan to move between countries

The quotes above are the employer's own words; the reading is ours. Always check the original listing and employment terms before working from another country.

Before you apply

Questions worth asking: Nomaders interpretation

This role involves office time, but the advert does not say how often. Ask how many days a week are expected on site.
No pay is stated. Ask for the salary range before investing time in interviews.
The advert does not say whether this is employment or a contractor arrangement. Ask, as it affects tax and benefits.

Produced automatically from this advert's text; not reviewed by a person. The employer's own page is the final word.

About the role

About Nu

Nu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.

Proprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability. Visit our Institutional Page

About the role

The Governance, Risk and Compliance (GRC) team enables Nubank to remain compliant with legal, regulatory, and internal requirements, while continuously identifying, classifying, and monitoring risks and providing strategic insights and performance evaluation to leadership. We collaborate with multidisciplinary teams to align our technology security strategy with Nubank’s overall business objectives, embedding security in business decisions so that Nubank can grow safely.

We make sure identified risks are mitigated and that leaders, inside and outside the IT and Security Business Unit, can make decisions based on risk. The focus of the security compliance squad is to ensure Nubank complies with regulations across countries and entities, and holds PCI DSS certifications, alongside other frameworks.

You will be responsible for

Provide operational support and act as a focal point for the assigned certification scope.

Interpret certification requirements applicable to your scope and execute and coordinate recurring tests required by the certification.

Maintain a day-to-day interface with audited and external teams on control implementation, scope alignment, evidence collection, and deadline agreement.

Propose and implement improvements in internal certification processes.

Build and maintain strong partnerships with product, engineering and IT teams to make audits and assessments smoother and less disruptive.

Collaborate with Engineering, Product, IT and global teams to integrate compliance requirements into processes and systems.

We are looking for a person who has

Solid knowledge across cybersecurity domains and frameworks such as PCI DSS, SOC2, DORA, NIST and similar standards.

Prior experience supporting security certification or audit processes, including end-to-end management, scoping, and evidence collection.

Experience with internal controls, compliance functions, and action plans follow up arising from audit findings or identified gaps.

Experience evaluating and implementing controls in cloud environments (for example AWS, GCP, Azure).

Strong analytical skills to interpret complex data and turn findings into actionable insights.

Strong communication skills to translate complex technical concepts.

Comfort using AI and automation as the default way of working, while validating outputs critically.

Advanced English, written and spoken, for work with global teams and external assessors. Spanish is a plus.

Nice to have

Requirements

·Comfort using AI and automation as the default way of working, while validating outputs critically.
·Advanced English, written and spoken, for work with global teams and external assessors. Spanish is a plus.
·Certifications such as PCI ISA or PCIP, CISA, CISM or CISSP.
·Experience in a regulated fintech or financial services environment.
·Experience with multi country or multi entity certification programs.

Benefits

·Chance of earning equity at Nubank
·Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
·Public Transportation Commuting Benefit (Vale-Transporte)
·NuCare – Psychological, Financial and Legal Assistance Program
·NuLanguage – Language Course Program

How to apply

1Check the flexibility label above, hybrid, matches where you plan to live and work.
2Tailor your CV to the role at Nubank, mentioning your remote working experience.
3Apply directly on the employer's careers page using the button below. Nomaders never handles your application.

Found 3d ago. Last checked today. Always confirm the details on the original posting, salary and location can change after publication.

Listing sourced from Company boards.

Pay not stated · You'll be taken to the employer's careers page.