Senior Security Engineer- Risks and Controls at Nubank

São Paulo, São Paulo, Brazil -

Full Time

Start Date

Immediate

Expiry Date

28 Feb, 26

Salary

0.0

Posted On

30 Nov, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Risks, Control, Processes, Process Mapping, Access-Life Cycle, GitHub, AWS, SAP, Communication, Negotiation, Critical Thinking, SOX Act, BSM, PCI-DSS, Programming, ETL

Industry

Financial Services

Description

About Nubank Nubank was founded in 2013 to free people from a bureaucratic, slow and inefficient financial system. Since then, through innovative technology and outstanding customer service, the company has been redefining people's relationships with money across Latin America. With operations in Brazil, Mexico, and Colombia, Nubank is today one of the largest digital banking platforms and technology-leading companies in the world. Today, Nubank is a global company, with offices in São Paulo (Brazil), Mexico City (Mexico), Bogotá (Colombia), Durham (United States), and Berlin (Germany). It was founded in 2013 in São Paulo, by Colombian David Vélez, and cofounded by Brazilian Cristina Junqueira and American Edward Wible. For more information, visit www.nubank.com.br. About the Team The IAM Matrix Team is part of the IAM Governance and Operations Team, the main responsibility is to be compliant with regulations, such as the SOX Act, BSM (NuInvest), PCI-DSS, among others. About the Role The IAM Matrix analyst will be a key person who is able to identify risks as SAT (sensitive access transaction) and SOD (segregation of duties), support the 1st line of defense in classifying operational risks involving SOX and/ or BSM (PQO) process, and support the auditors in control evaluation. Responsibilities Evaluate and classify permissions risks for systems under regulations as SOX and BSM. Cross-check the application owners about their operational risks involving their areas to mapping SOD cross activities and transactions. Be able to attend the auditors and explain the rationale behind the mapped activities and risks Manage the annual schedule with all matrices to be delivered, considering reviewing and onboarding systems scope. Manage the KPIs of delivered tasks, monitoring and giving visibility to stakeholders about possible problems in the annual schedule. Be able to address the engineers to develop safe and useful systems. Required Skills and Expertise Risks, control, and processes. Process mapping Familiarity with Access-Life Cycle Good knowledge about systems such as GitHub, AWS and SAP. High level communication (written and spoken); Negotiation skills; Critical thinking; Experienced with the SOX Act, BSM, and PCI-DSS regulations. Ability to think critically and solve problems, create win-win solutions. Knowledge of programming, queries and ETLs will be an advantage. Advanced English Role Location This position is based in Sao Paulo, SP, Brazil Work mode: 2 times per week 2026 3 time per week 2027 Benefits Health, dental and life insurance Meal allowance Transportation assistance 30 days of paid vacation Equity at Nubank Parking partnership - discounted parking in our office Free bike parking with showers available NuCare - Our mental health and wellness assistance program NuLanguage - Our language learning program Gympass partnership Extended maternity and paternity Leaves Child care allowance ‘Espaço Feijão’- Private nursing and breastfeeding spaces in our buildings Onsite Health Center - Medical support for every Nubanker in our office Diversity & Inclusion At Nubank, we are committed to building a diverse and inclusive workplace. We believe that variety in perspectives, backgrounds, and experiences enriches our company. We accommodate employees and applicants with different backgrounds and embrace equality in hiring.

Responsibilities

The IAM Matrix analyst will evaluate and classify permissions risks for systems under regulations such as SOX and BSM. They will also manage the annual schedule for matrices and support auditors in control evaluation.