drjobs IT Risk Senior Analyst

IT Risk Senior Analyst

Employer Active

1 Vacancy
drjobs

Job Alert

You will be updated with latest job alerts via email
Valid email field required
Send jobs
Send me jobs like this
drjobs

Job Alert

You will be updated with latest job alerts via email

Valid email field required
Send jobs
Job Location drjobs

São Paulo - Brazil

Monthly Salary drjobs

Not Disclosed

drjobs

Salary Not Disclosed

Vacancy

1 Vacancy

Job Description

About Nubank:
Nubank was founded in 2013 to free people from a bureaucratic slow and inefficient financial system. Since then through innovative technology and outstanding customer service the company has been redefining peoples relationships with money across Latin America. With operations in Brazil Mexico and Colombia Nubank is one of the worlds largest digital banking platforms and technology-leading companies.
Today Nubank is a global company with offices in So Paulo (Brazil) Mexico City (Mexico) Buenos Aires (Argentina) Bogot (Colombia) Durham (United States) and Berlin (Germany). It was founded in 2013 in Sao Paulo by Colombian David Vlez and cofounded by Brazilian Cristina Junqueira and American Edward Wible. For more information visit

About the team:
IT Risk Team is part of the Risk Management Tribe at Nubank responsible for identifying and managing technology and information security risks across information technology systems including microservices and processes. IT Risk Management consists in helping the business to identify threats and vulnerabilities in order to mitigate information technology risks that could materialize and negatively impact data confidentiality integrity and availability.
About the role:
In the role of the IT Risk Senior Analyst you will be in charge of playing a crucial part in ensuring the security compliance and overall risk management of our organizations information technology systems including microservices and processes. As a senior IT Risk member and part of the second line of defense you will be responsible for working in partnership with Business Units leading risk assessment initiatives implementing risk mitigation strategies and collaborating with cross-functional and multidisciplinary teams across to maintain a robust IT Risk management framework.

Key Responsibilities:

  • Conduct comprehensive risk assessments across various IT domains identifying potential vulnerabilities threats and impacts. Analyze risks to determine their significance and develop insights for senior management.
  • Develop and implement effective risk mitigation strategies that align with business objectives and regulatory requirements (E.g. for BCB: Res. 85 and 4893 and for Investments: CVM 035 CVM 021 and PQO). Collaborate with relevant stakeholders to ensure the successful execution of risk management initiatives.
  • Monitor regulatory changes and industry best practices to ensure the organizations IT risk management practices remain compliant. Assist in the development and enforcement of IT risk management policies and procedures.
  • Collaborate with incident response teams to develop plans for handling and recovering from IT security incidents. Participate in post-incident analysis and recommend improvements to prevent future occurrences.
  • Communicate complex IT risk issues and solutions to both technical and non-technical stakeholders. Prepare metrics reports and updates for senior management and executive leadership.
  • Drive continuous improvement in IT risk management processes. Identify opportunities to enhance existing procedures tools and methodologies to adapt to evolving risk landscapes.
  • Provide guidance and mentorship to junior members of the IT risk team. Assist in their professional development by sharing expertise and knowledge.

Qualification Requirements:

  • Minimum of 5 years relevant experience in cybersecurity or IT Risk Management with a focus on risk assessment analysis and mitigation.
  • Bachelors degree in Information Security Computer Science or a related field. Masters degrees or relevant certifications (e.g. CISA CISSP CRISC and/or other) are pluses.
  • In-depth understanding of information security principles risk frameworks and regulatory compliance (e.g. NIST LGPD ISO 27001).
  • Analytical and problem-solving skills with the ability to translate complex technical information into clear business insights.
  • Strong knowledge of technology environments including information security identity and access management and cloud-born environments (e.g.: AWS and GCP).
  • Advanced English communication skills both written and verbal.

Benefits:

  • Health dental and life insurance
  • Meal allowance
  • Transportation assistance
  • 30 days of paid vacation
  • Chance of earning equity at Nubank
  • Parking partnership - discounted parking in our office
  • Free bike parking with showers available
  • NuCare - Our mental health and wellness assistance program
  • NuLanguage - Our language learning program
  • Gympass partnership
  • Extended maternity and paternity Leaves
  • Child care allowance
  • Espao Feijo- Private nursing and breastfeeding spaces in our buildings
  • Onsite Health Center - Medical support for every Nubanker in our office

Diversity and Inclusion at Nubank
We want to have a product for everyone and we build strong and diverse teams that rise to the challenge. We are a team of the most creative people in technology and we hire with equal opportunity irrespective of gender ethnicity religion sexual orientation or background. We are a very process-light organization that values human interactions and that is an essential part of our culture.

At Nubank everyone has the opportunity to speak up and participate grow and share ideas.


Required Experience:

Senior IC

Employment Type

Full Time

Company Industry

About Company

Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.