Operational Risk Specialist (BCM & TPRM)

About Us Nu is one of the largest digital financial platforms in the world, with more than 127 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we re building. Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human. Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page a https://international.nubank.com. /careers/ About the role As an Operational Risk Specialist, your mission is to ensure that our operations and critical third parties are properly assessed, monitored, and managed. You will act as a guardian of our resilience strategy, providing oversight and a high-level technical challenge to business areas to maintain operational continuity and regulatory compliance. Beyond technical oversight, you will play a strategic orchestration role, connecting Business units, Procurement, and Risk assessment teams. Your goal is to ensure the third-party lifecycle is safe, efficient, and standardized, maintaining our competitive edge and long-term success. You ll be responsible for BCM Oversight (Brazil Scope): Overseeing the Business Continuity Plan (BCP) for Brazil, including the critical review and challenge of Business Impact Analysis (BIA) and Operational Continuity Plans (OCP and Disaster Recovery). Testing and Validation: Monitoring the execution of continuity tests to validate that recovery capabilities meet both local and global standards. Risk Governance and RAS: Executing and monitoring the Risk Acceptance Statement (RAS) monthly, ensuring all resilience metrics are accurately tracked. Third-Party Resilience: Ensuring that critical vendors are properly monitored and managed throughout their lifecycle, mitigating risks that could impact our operational stability. Cross-Functional Coordination: Acting as the bridge between Procurement, Business areas, and Risk teams to ensure a standardized and secure third-party integration process. Regulatory and Audit Interface: Supporting internal/external audits and regulators (BACEN, CVM, ANBIMA) by providing technical evidence and defending our continuity and TPRM