Skip to content

Leadership

US CISO

Nubank logoNubankPalo AltoFull-timePosted 1mo ago
Apply on Nubank (shows the role here)Nubank as an employer: salaries and roles

The full posting

About Nu

Nu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.

Proprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability.

Visit our Institutional Page

About the team

As Nu expands its footprint into the US, we are seeking a visionary, highly specialized US Chief Information Security Officer (CISO).

This is not a traditional operational CISO role. You will serve as the executive pillar for Nu’s US strategy, bridging the gap between traditional financial regulations and modern, hyper-scalable crypto and AI technology platforms. You will act as the point of accountability for US regulatory bodies, lead governance transformations, and oversee critical cross-functional security domain leadership.

We are looking for a security leader who balances deep traditional banking compliance expertise with a forward-looking understanding of cryptocurrency protocols and artificial intelligence security.

About the role

As the US CISO, you will architect, establish, and operationalize a unified US security and compliance posture. You will protect customer trust, satisfy strict US regulatory frameworks (e.g., OCC compliance), and secure frontier technology initiatives ensuring Nu’s platform remains resilient, future-proof, and compliant as we scale globally.

Key responsibilities and Expectations

  • US Regulatory & Regulatory Agency Liaison: Serve as the primary US security authority and point of contact for regulators (e.g. OCC). Oversee all mandatory statutory disclosures, including financial and IBFR background reviews.
  • Crypto & Web3 Product Defense: Partner with crypto product and infrastructure teams to secure future-proof financial technologies, translating complex blockchain architectures into compliant, enterprise-grade risk frameworks.
  • Governance, Risk, and Compliance (GRC) Transformation: Uplevel Nu’s GRC program to support multi-geography scaling.
  • AI Security Frameworks: Lead the strategic security response for AI initiatives - from developer workflows and engineering toolsets to model integrity and deployment risks.
  • Insider Threat Program Development: Design, build, and deploy an end-to-end enterprise Insider Threat program across first and second lines of defense in close partnership with Risk and Legal teams.

Professional Experience & Education

  • Executive Leadership Experience: 15+ years in Information Security, with significant experience operating at an executive, director, or CISO level within FinTech, Banking, or Digital Assets.
  • US Financial Regulatory Expertise: Deep hands-on experience navigating US regulatory environments, specifically working with the OCC, statutory disclosure processes, and financial institution compliance.
  • Cryptocurrency & Blockchain Security: Demonstrated domain expertise in cryptocurrency security, decentralized finance, or digital asset platforms. Experience at leading crypto-native institutions or hyper-growth FinTechs is highly valued.
  • AI Security Strategy: Familiarity with modern AI security risks, LLM integrations, safe code generation tools, and model security.
  • GRC Upleveling: Proven track record of rebuilding or scaling GRC frameworks within complex, multi-national organizations.
  • Executive Communication: Exceptional communication skills needed to interface effectively with regulatory examiners, executive leadership, and board members.

Competencies & Attributes

  • Fluency in English is required; Portuguese and/or Spanish are a plus.
  • Strong people leadership at scale, including developing managers and leading teams of differing maturity through change and ambiguity.
  • Excellent stakeholder management and communication, with maturity in negotiation and conflict resolution across senior cross-functional partners.
  • A pragmatic, hybrid profile, balanced across people leadership, product sensibility, and technical depth rather than weighted to any single one. A genuine product mindset focused on customer and agent outcomes, with the technical depth to raise the bar in architectural discussions.

Our Benefits

  • Top Tier Medical Insurance
  • Top Tier Dental and Vision Insurance
  • 401(k) matching
  • 20 days time off, 14 company holidays, and great culture that emphasizes work life balance.
  • Life Insurance and AD&D
  • Nucleo - Our learning platform of courses
  • NuLanguage - Our language learning program
  • NuCare - Our mental health and wellness assistance program
  • Extended maternity and paternity leaves
  • Saving Plans - Health Saving Account and Flexible Spending Account
  • Twice a week in the office + quarterly trips to Sao Paulo (Brazil) to build relationships with coworkers.

Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.

To maintain a consistent and fair process for every candidate, Nu does not provide individualized technical feedback. See how our policy works here

Text as Nubank published it; last compared with the original on 12 Nov 2026.

Apply on Nubank (shows the role here)

The application

Your details, CV and LinkedIn, then 11 questions.

Keep these to handCVLinkedIn
  1. 1.
    How familiar are you with distributed systems, such as asynchronous architecture, microservices, etc.?Choose one
  2. 2.
    Which of the options below best describes your involvement with architecture discussions?Choose one
  3. 3.
    How familiar are you with test automation?Choose one
  4. 4.
    What is your salary expectation?Short answer
  5. 5.
    Our primary backend language is Clojure, but it is not a required skill. Please share your experience with functional programming.Short answer · optional
  6. 6.
    Are you available to work onsite two to three days per week?Yes or no
  7. 7.
    Are you legally authorized to work in the country where this position is located?Yes or no
  8. 8.
    Will you require sponsorship for employment visa status now or in the future?Yes or no
  9. 9.
    Do you require relocation for this role?Choose one: No, I don't require relocation · Yes, I require relocation and am willing to relocate · Yes, I require relocation but am not willing to relocate
  10. 10.
    Have you previously worked at Nubank or any company acquired by Nubank?Yes or no
  11. 11.
    Have you participated in a hiring process with Nubank in the last 6 months?Yes or no

Taken from Nubank's application form as it stood on 12 Nov 2026.

The employer: Nubank

Runs a branchless bank and card business in Brazil, Mexico and Colombia; seven security openings cover AI, mobile, IAM and PCI compliance work.

Pay and benefits: Salaried engineering and leadership roles, office-based in São Paulo, Palo Alto or Miami.

Full postings from Nubank All Nubank openings on the board Nubank employer profile

Other security roles worth a look

Run a security team before?

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when Nubank posts a security role

We read Nubank's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.

US CISO at Nubank | CyberJobs.cc