US CISO - nubank

Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services.

Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns.

Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks.

Visit our Institutional Page https://www.nu.com/2026-en

About the team

As Nubank expands its footprint into the US, we are seeking a visionary, highly specialized US Chief Information Security Officer (CISO).

This is not a traditional operational CISO role. You will serve as the executive pillar for Nubank’s US strategy, bridging the gap between traditional financial regulations and modern, hyper-scalable crypto and AI technology platforms. You will act as the point of accountability for US regulatory bodies, lead governance transformations, and oversee critical cross-functional security domain leadership.

We are looking for a security leader who balances deep traditional banking compliance expertise with a forward-looking understanding of cryptocurrency protocols and artificial intelligence security.

About the role

As the US CISO, you will architect, establish, and operationalize a unified US security and compliance posture. You will protect customer trust, satisfy strict US regulatory frameworks (e.g., OCC compliance), and secure frontier technology initiatives ensuring Nubank’s platform remains resilient, future-proof, and compliant as we scale globally.

Key responsibilities

and Expectations

• US Regulatory & Regulatory Agency Liaison: Serve as the primary US security authority and point of contact for regulators (e.g. OCC). Oversee all mandatory statutory disclosures, including financial and IBFR background reviews.
• Crypto & Web3 Product Defense: Partner with crypto product and infrastructure teams to secure future-proof financial technologies, translating complex blockchain architectures into compliant, enterprise-grade risk frameworks.
• Governance, Risk, and Compliance (GRC) Transformation: Uplevel Nubank’s GRC program to support multi-geography scaling.
• AI Security Frameworks: Lead the strategic security response for AI initiatives—from developer workflows and engineering toolsets to model integrity and deployment risks.