美国首席信息安全官
US CISO
关于Nu
Nu是拉丁美洲领先的数字银行，为巴西、墨西哥和哥伦比亚的1.4亿客户提供服务。公司通过利用数据和专有技术推动行业变革，开发创新的产品和服务。
以“对抗复杂性，赋能人们”为使命，Nu为客户提供完整的金融旅程，通过负责任的贷款和透明度促进金融准入和进步。公司由高效且可扩展的商业模式驱动，结合低成本的服务与不断增长的回报。
Nu的影响已获得多项奖项的认可，包括《时代》100家最具影响力公司、《快公司》最具创新力公司以及《福布斯》世界最佳银行。
访问我们的机构页面 https://www.nu.com/2026-en
关于团队
随着Nubank进入美国市场，我们正在寻找一位有远见、高度专业化的美国首席信息安全官（CISO）。
这不是一个传统的运营型CISO职位。你将成为Nubank美国战略的执行支柱，弥合传统金融监管与现代、超大规模的加密货币和人工智能技术平台之间的差距。你将作为美国监管机构的问责点，领导治理转型，并监督关键的跨职能安全领域领导工作。
我们寻找一位安全领导者，能够在深厚的传统银行业合规专业知识与对加密货币协议和人工智能安全的前瞻性理解之间取得平衡。
关于职位
作为美国CISO，你将设计、建立并实施统一的美国安全与合规态势。你将保护客户信任，满足严格的美国监管框架（例如OCC合规），并确保前沿技术项目的安全，使Nubank的平台在全球扩展过程中保持稳健、未来化和合规性。
主要职责与期望
- 美国监管与监管机构联络：作为美国安全的主要权威和监管机构（例如OCC）的联系人。监督所有强制性法定披露，包括财务和IBFR背景审查。
- 加密货币与Web3产品防御：与加密货币产品和基础设施团队合作，保护未来化的金融科技，将复杂的区块链架构转化为合规的企业级风险框架。
- 治理、风险与合规（GRC）
查看英文原文
ABOUT NU
Nu is the leading digital bank in Latin America, serving 140 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services.
Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns.
Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks.
Visit our Institutional Page https://www.nu.com/2026-en
About the team
As Nubank expands its footprint into the US, we are seeking a visionary, highly specialized US Chief Information Security Officer (CISO).
This is not a traditional operational CISO role. You will serve as the executive pillar for Nubank’s US strategy, bridging the gap between traditional financial regulations and modern, hyper-scalable crypto and AI technology platforms. You will act as the point of accountability for US regulatory bodies, lead governance transformations, and oversee critical cross-functional security domain leadership.
We are looking for a security leader who balances deep traditional banking compliance expertise with a forward-looking understanding of cryptocurrency protocols and artificial intelligence security.
About the role
As the US CISO, you will architect, establish, and operationalize a unified US security and compliance posture. You will protect customer trust, satisfy strict US regulatory frameworks (e.g., OCC compliance), and secure frontier technology initiatives ensuring Nubank’s platform remains resilient, future-proof, and compliant as we scale globally.
Key responsibilities and Expectations
- US Regulatory & Regulatory Agency Liaison: Serve as the primary US security authority and point of contact for regulators (e.g. OCC). Oversee all mandatory statutory disclosures, including financial and IBFR background reviews.
- Crypto & Web3 Product Defense: Partner with crypto product and infrastructure teams to secure future-proof financial technologies, translating complex blockchain architectures into compliant, enterprise-grade risk frameworks.
- Governance, Risk, and Compliance (GRC) Transformation: Uplevel Nubank’s GRC program to support multi-geography scaling.
- AI Security Frameworks: Lead the strategic security response for AI initiatives—from developer workflows and engineering toolsets to model integrity and deployment risks.
- Insider Threat Program Development: Design, build, and deploy an end-to-end enterprise Insider Threat program across first and second lines of defense in close partnership with Risk and Legal teams.
Qualifications
Professional Experience & Education:
- Executive Leadership Experience: 15+ years in Information Security, with significant experience operating at an executive, director, or CISO level within FinTech, Banking, or Digital Assets.
- US Financial Regulatory Expertise: Deep hands-on experience navigating US regulatory environments, specifically working with the OCC, statutory disclosure processes, and financial institution compliance.
- Cryptocurrency & Blockchain Security: Demonstrated domain expertise in cryptocurrency security, decentralized finance, or digital asset platforms. Experience at leading crypto-native institutions or hyper-growth FinTechs is highly valued.
- AI Security Strategy: Familiarity with modern AI security risks, LLM integrations, safe code generation tools, and model security.
- GRC Upleveling: Proven track record of rebuilding or scaling GRC frameworks within complex, multi-national organizations.
- Executive Communication: Exceptional communication skills needed to interface effectively with regulatory examiners, executive leadership, and board members.
Competencies & Attributes:
- Fluency in English is required; Portuguese and/or Spanish are a plus.
- Strong people leadership at scale, including developing managers and leading teams of differing maturity through change and ambiguity.
- Excellent stakeholder management and communication, with maturity in negotiation and conflict resolution across senior cross-functional partners.
- A pragmatic, hybrid profile, balanced across people leadership, product sensibility, and technical depth rather than weighted to any single one. A genuine product mindset focused on customer and agent outcomes, with the technical depth to raise the bar in architectural discussions.
OUR BENEFITS
- Top Tier Medical Insurance
- Top Tier Dental and Vision Insurance
- 401(k) matching
- 20 days time off, 14 company holidays, and great culture that emphasizes work life balance.
- Life Insurance and AD&D
- Nucleo - Our learning platform of courses
- NuLanguage - Our language learning program
- NuCare - Our mental health and wellness assistance program
- Extended maternity and paternity leaves
- Saving Plans - Health Saving Account and Flexible Spending Account
- Twice a week in the office + quarterly trips to Sao Paulo (Brazil) to build relationships with coworkers.
Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.