第三方风险管理专家
Third Party Risk Management Expert
关于Nu
Nu是拉丁美洲领先的数字银行，为巴西、墨西哥和哥伦比亚的1.4亿客户提供服务。公司通过利用数据和专有技术推动行业变革，开发创新产品和服务。
以“对抗复杂性，赋能人们”为使命，Nu为客户提供完整的金融旅程，通过负责任的借贷和透明度促进金融包容性和进步。公司由高效且可扩展的商业模式驱动，结合低成本服务与持续增长的回报。
Nu的影响力已获得多项奖项的认可，包括《时代》100家最具影响力公司、《快公司》最具创新力公司以及《福布斯》全球最佳银行。
访问我们的机构页面 https://www.nu.com/2026-en
职位描述
在Nubank，我们挑战现状，强化对风险管理的掌控，将全球和本地流程与我们的战略目标保持一致。第三方风险管理专家角色在这一背景下发挥关键作用，负责协调和监控支持Nubank全球运营的供应商相关风险。
主要目标是确保对业务至关重要的第三方得到适当的评估、监控和管理，促进运营连续性、信息安全和监管合规。该职能还将连接业务部门、采购和风险评估团队，确保第三方生命周期以安全、高效和标准化的方式进行。该职位具有全球范围，涵盖Nubank运营的地区及未来扩展地区，直接对接不同监管体系和活跃的银行牌照。
- 制定第三方风险管理的全球指南。
- 构建并持续优化Nubank的全球TPRM模型，包括资质方法、关键性标准和按风险领域划分的控制框架。
- 评估并决定供应商控制的充分性，根据各司法管辖区的监管背景触发增强尽职调查流程。
- 领导将TPRM框架扩展到新地区，确保模型在上线前适应当地监管要求。
- 管理并指导基于人工智能的供应商资质平台的开发，负责流程设计和生成建议的人工验证。
-
查看英文原文
ABOUT NU
Nu is the leading digital bank in Latin America, serving 140 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services.
Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns.
Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks.
Visit our Institutional Page https://www.nu.com/2026-en
About the role
At Nubank, we challenge the status quo to strengthen our ownership of risk management, aligning global and local processes with our strategic objectives. The Third Party Risk Management Expert role plays an essential part in this context, responsible for coordinating and monitoring the risks associated with vendors that support Nubank's operations globally.
The main objective is to ensure that third parties critical to the business are properly assessed, monitored, and managed, promoting operational continuity, information security, and regulatory compliance. This function will also connect business areas, Procurement, and risk assessment teams, ensuring that the third-party lifecycle happens in a secure, efficient, and standardized way. The role has global scope, covering the locations where Nubank operates and future expansion geographies, with direct interface with different regulatory regimes and active banking licenses.
- Defining global guidelines for third-party risk management.
- Architecting and evolving Nubank's global TPRM model, including qualification methodology, criticality criteria, and control framework by risk domain.
- Evaluating and deciding on the adequacy of vendor controls, triggering enhanced due diligence processes based on the regulatory context of each jurisdiction.
- Leading the expansion of the TPRM framework into new geographies, ensuring the model is adapted to local regulatory requirements from pre-launch.
- Governing and guiding the development of an AI-powered vendor qualification platform, being responsible for process design and human validation of generated recommendations.
- Determining and maintaining Nubank's TPRM RACI, ensuring clarity of roles and responsibilities across involved areas.
- Defining the minimum requirements and baseline of TPRM controls to be followed across all geographies, ensuring global consistency and alignment.
- Conducting continuous monitoring of critical third parties, tracking indicators, incidents, and action plans.
- Consolidating information on third parties and their risks, providing a global and integrated view for Nubank's forums and governance.
- Collaborating with risk domains and stakeholders to define and review controls, processes, and vendor assessment criteria.
- Generating and monitoring Key Risk Indicators that represent third-party risk status globally.
- Representing TPRM as a 2nd Line of Defense function before regulators and auditors (BCB, CNBV, SFC, FFIEC/OCC, FMA), acting as the technical point of contact for exams and questions on vendor methodology and controls.
- Coordinating RCSA processes and executing Risk Assessment & Internal Control Testing (RA&ICT) activities within the TPRM scope.
What we are looking for
- Is autonomous and interested in working in a dynamic environment with constant interaction across different areas and countries.
- Has analytical thinking and curiosity to deeply understand how third parties operate and their business impact.
- Has prior experience with third-party risk management and familiarity with risk frameworks.
- Has strong communication skills and the ability to translate technical risk into clear messages for different audiences.
- Is data-driven, with the ability to analyze metrics and propose evidence-based solutions.
- Has solid ability to influence without formal authority, capable of challenging methodologies and practices across business areas, risk domains, and regulatory stakeholders in multiple geographies.
- Has proven experience managing complex, multidisciplinary projects, with the ability to orchestrate simultaneous deliverables in highly ambiguous contexts with multiple regulators.
- Is familiar with AI applied to risk management, including critical evaluation of model outputs, human-in-the-loop process design, and governance of automations in regulated contexts.
- Has advanced English.
- It is a plus if the candidate has familiarity with Business Continuity and Crisis Management frameworks.
Benefits
- Chance of earning equity at Nubank
- Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
- Public Transportation Commuting Benefit (Vale-Transporte)
- NuCare – Psychological, Financial and Legal Assistance Program
- Life Insurance
- Medical Plan
- Dental Plan
- NuLanguage – Language Course Program
- Nucleo - Our learning platform of courses
- Extended Parental Leave
- Daycare Allowance
- Parental Consultancy
- Work-from-home Allowance
- Gym Partnerships
- 30 days of paid vacation
- Relocation Assistance Package, if applicable
Work Model for this RoleHybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/
Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.