Operational Risk Specialist (BCM & TPRM)

About Us Nu is one of the largest digital financial platforms in the world, with more than 127 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building. Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human. Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/ About the role As an Operational Risk Specialist , your mission is to ensure that our operations and critical third parties are properly assessed, monitored, and managed. You will act as a guardian of our resilience strategy, providing oversight and a high-level technical challenge to business areas to maintain operational continuity and regulatory compliance. Beyond technical oversight, you will play a strategic orchestration role, connecting Business units, Procurement, and Risk assessment teams. Your goal is to ensure the third-party lifecycle is safe, efficient, and standardized, maintaining our competitive edge and long-term success. You'll be responsible for BCM Oversight (Brazil Scope): Overseeing the Business Continuity Plan (BCP) for Brazil, including the critical review and challenge of Business Impact Analysis (BIA) and Operational Continuity Plans (OCP and Disaster Recovery). Testing & Validation: Monitoring the execution of continuity tests to validate that recovery capabilities meet both local and global standards. Risk Governance & RAS: Executing and monitoring the Risk Acceptance Statement (RAS) monthly, ensuring all resilience metrics are accurately tracked. Third-Party Resilience: Ensuring that critical vendors are properly monitored and managed throughout their lifecycle, mitigating risks that could impact our operational stability. Cross-Functional Coordination: Acting as the bridge between Procurement, Business areas, and Risk teams to ensure a standardized and secure third-party integration process. Regulatory & Audit Interface: Supporting internal/external audits and regulators (BACEN, CVM, ANBIMA) by providing technical evidence and defending our continuity and TPRM framework. We are looking for a person who has Experience in Business Continuity Management and a solid understanding of risk frameworks within the financial services or banking industry. Solid experience in the second line of defense (2LoD), focusing on the review, challenge, and oversight of the Business Continuity and Third-Party Risk Management lifecycles. Self-driven and thrive in fast-paced environments, with a passion for collaborating across various departments and international borders. Strong knowledge of Brazilian regulations (BACEN, CVM, and ANBIMA) and their specific requirements for operational resilience and vendor oversight. Ability to translate complex technical information into clear business insights for executive-level reporting. Experience in supporting Internal/External Audits and Regulators, providing high-quality technical justifications and evidence within deadlines. Advanced English: Ability to interact and align daily with stakeholders from diverse geographies in English, ensuring local requirements are integrated into global policies. Clear and objective communication skills, with the ability to present findings to executive leadership and local forums. A proactive, self-driven mindset to take full ownership of the BCM review calendar, issue monitoring, and short-term deliverables. Experience or knowledge in Third-Party Risk Management is a plus, specifically regarding vendor resilience. Location for this opportunity (City, Country) São Paulo, Brazil Our Ben