Skip to content

GRC

Senior Security Engineer - GRC (PCI)

Nubank logoNubankSão PauloFull-timePosted 3w ago
Apply on Nubank (shows the role here)Nubank as an employer: salaries and roles

The full posting

About Nu

Nu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.

Proprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability.

Visit our Institutional Page

About the role

The Governance, Risk and Compliance (GRC) team enables Nubank to remain compliant with legal, regulatory, and internal requirements, while continuously identifying, classifying, and monitoring risks and providing strategic insights and performance evaluation to leadership. We collaborate with multidisciplinary teams to align our technology security strategy with Nubank’s overall business objectives, embedding security in business decisions so that Nubank can grow safely.

We make sure identified risks are mitigated and that leaders, inside and outside the IT and Security Business Unit, can make decisions based on risk. The focus of the security compliance squad is to ensure Nubank complies with regulations across countries and entities, and holds PCI DSS certifications, alongside other frameworks.

You will be responsible for

  • Provide operational support and act as a focal point for the assigned certification scope.
  • Interpret certification requirements applicable to your scope and execute and coordinate recurring tests required by the certification.
  • Register, manage, and track action plans arising from audit findings or identified gaps.
  • Maintain a day-to-day interface with audited and external teams on control implementation, scope alignment, evidence collection, and deadline agreement.
  • Propose and implement improvements in internal certification processes.
  • Build and maintain strong partnerships with product, engineering and IT teams to make audits and assessments smoother and less disruptive.
  • Collaborate with Engineering, Product, IT and global teams to integrate compliance requirements into processes and systems.

We are looking for a person who has

  • Solid knowledge across cybersecurity domains and frameworks such as PCI DSS, SOC2, DORA, NIST and similar standards.
  • Prior experience supporting security certification or audit processes, including end-to-end management, scoping, and evidence collection.
  • Experience with internal controls, compliance functions, and action plans follow up arising from audit findings or identified gaps.
  • Experience evaluating and implementing controls in cloud environments (for example AWS, GCP, Azure).
  • Strong analytical skills to interpret complex data and turn findings into actionable insights.
  • Strong communication skills to translate complex technical concepts.
  • Comfort using AI and automation as the default way of working, while validating outputs critically.
  • Advanced English, written and spoken, for work with global teams and external assessors. Spanish is a plus.

Nice to have

  • Certifications such as PCI ISA or PCIP, CISA, CISM or CISSP.
  • Experience in a regulated fintech or financial services environment.
  • Experience with multi country or multi entity certification programs.

Location for this opportunity (City, Country)

  • São Paulo, Brazil
  • Campinas, Brazil
  • Rio de Janeiro, Brazil
  • Belo Horizonte, Brazil

Benefits

  • Chance of earning equity at Nubank
  • Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
  • Public Transportation Commuting Benefit (Vale-Transporte)
  • NuCare – Psychological, Financial and Legal Assistance Program
  • Life Insurance
  • Medical Plan
  • Dental Plan
  • NuLanguage – Language Course Program
  • Nucleo - Our learning platform of courses
  • Extended Parental Leave
  • Daycare Allowance
  • Parental Consultancy
  • Work-from-home Allowance
  • Gym Partnerships
  • 30 days of paid vacation
  • Relocation Assistance Package, if applicable

Work Model for this Role

Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/

Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.

To maintain a consistent and fair process for every candidate, Nu does not provide individualized technical feedback. See how our policy works here

Text as Nubank published it; last compared with the original on 12 Nov 2026.

Apply on Nubank (shows the role here)

The application

Your details, LinkedIn and CV, then 11 questions.

Keep these to handLinkedInCV
  1. 1.
    What is your level of English proficiency?Choose one
  2. 2.
    What is your salary expectation?Short answer · optional
  3. 3.
    Do you have hands-on experience leading and executing end-to-end security certification and audit processes (such as PCI DSS, SOC 2, or DORA), including scoping, evidence collection, and tracking remediation plans?Yes or no · optional
  4. 4.
    Have you evaluated and implemented security controls within major cloud environments (AWS, GCP, or Azure) to align technical architectures with compliance standards?Yes or no · optional
  5. 5.
    Do you have experience partnering directly with engineering/product teams and external auditors in a regulated environment, leveraging automation or AI to streamline compliance processes?Yes or no · optional
  6. 6.
    Are you available to work onsite two to three days per week?Yes or no
  7. 7.
    Are you legally authorized to work in the country where this position is located?Yes or no
  8. 8.
    Will you require sponsorship for employment visa status now or in the future?Yes or no
  9. 9.
    Do you require relocation for this role?Choose one: No, I don't require relocation · Yes, I require relocation and am willing to relocate · Yes, I require relocation but am not willing to relocate
  10. 10.
    Have you previously worked at Nubank or any company acquired by Nubank?Yes or no
  11. 11.
    Have you participated in a hiring process with Nubank in the last 6 months?Yes or no

Taken from Nubank's application form as it stood on 12 Nov 2026.

The employer: Nubank

Runs a branchless bank and card business in Brazil, Mexico and Colombia; seven security openings cover AI, mobile, IAM and PCI compliance work.

Pay and benefits: Salaried engineering and leadership roles, office-based in São Paulo, Palo Alto or Miami.

Full postings from Nubank All Nubank openings on the board Nubank employer profile

Other security roles worth a look

Led audits or a certification programme?

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when Nubank posts a security role

We read Nubank's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.