US CISO

Serves as Nubank's US Chief Information Security Officer as the company expands into the United States, an executive role focused on strategy and regulatory accountability rather than running day-to-day security operations. The CISO is the main US security authority and point of contact for regulators such as the OCC.

The role builds a unified US security and compliance posture that protects customer trust and meets federal banking requirements, oversees mandatory statutory disclosures and background reviews, and leads security for frontier technology. That includes working with crypto product and infrastructure teams to turn blockchain architectures into enterprise-grade risk frameworks, leading the security response to AI initiatives from developer tooling to model integrity and deployment risk, upgrading the GRC programme so it scales across geographies, and designing and launching an enterprise insider threat programme across the first and second lines of defence with Risk and Legal. The CISO also oversees security domain leaders across functions and develops managers through change.

Nubank wants fifteen or more years in information security with substantial time at executive, director or CISO level in fintech, banking or digital assets, hands-on experience with the OCC and US financial regulation, real cryptocurrency and blockchain security expertise, familiarity with AI and LLM security, and a record of rebuilding GRC in multinational organisations. Strong communication with examiners, executives and boards is essential, and Portuguese or Spanish helps. The role is hybrid, two days a week in the office, with quarterly trips to São Paulo.