AI Risk Management Senior Specialist

About Nu Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services. Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns. Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks. Visit our Institutional Page About the Role This position sits within Nubank’s global risk management team and provides second-line oversight of risks arising from artificial intelligence and generative AI across the company. You will partner with AI Core, Engineering, Data, Information Security and other first-line teams from the earliest stages of initiatives, while maintaining independent challenge and accountability for risk governance. The initial focus is to establish scalable AI risk oversight across the company, including risk assessments on cutting edge technologies, providing risk taxonomy, appetite, KRIs, risk and control matrices, control testing, incident oversight, and issue management. You’ll be Responsible for Shift-left risk management by partnering with the first line at the conception and design of AI initiatives, helping teams identify risks and shape proportionate response strategies. Recommend and maintain the AI risk appetite statement, metrics, KRIs, and early-warning indicators, including thresholds and escalation logic. Oversee risks introduced by AI and GenAI third-party providers, recommending governance requirements and baseline controls for their safe use. Enforce consistent risk identification, recommend baseline controls, and independently test key controls. Own control testing for AI-related scopes, prioritising the highest risks and most important controls. Oversee AI-related incidents, connect them to risk governance, and feed lessons learned back into the taxonomy, controls, appetite, and monitoring approach. Review and challenge first-line risk assessments, controls, and decisions. Build strong working relationships with Model Risk, Information Security, Data Privacy, Technology Risk, Operational Risk, and other relevant risk teams to clarify roles, coordinate oversight, and avoid gaps or duplication.

Someone Who Has Senior experience in technology, ideally in a second-line risk function or a risk-heavy technical role. Fluency with GenAI and large language models, including the AI lifecycle and the non-model risks associated with data, access, resilience, third parties, agentic tool use, and guardrails. Strong grounding in core risk practices, including risk assessments, control testing, and risk monitoring. Familiarity with relevant governance, risk, and security frameworks, such as NIST AI RMF, the EU AI Act, NIST CSF, ISO/IEC 27001, and ISO 31000, with the judgment to apply them pragmatically. A mindset of constructively challenging, and being able to partner with other teams to elaborate resilient and secure solutions. Excellent communication and stakeholder management skills, with confidence engaging senior leaders and presenting a clear risk picture in governance forums. Strong analytical, problem-solving, and decision-making skills, including the ability to address complex and ambiguous situations. A pragmatic, builder’s mentality: comfortable standing up new frameworks and processes, operating with ambiguity, and balancing strong controls with simplicity and speed. Strong team-working skills and the ability to build trust across functions, geographies, and lines of defense. Bachelor’s