Operational Risk Senior Specialist

Job description

# **About Nu** Nu is the leading digital bank in Latin America, serving 140 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services. Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns. Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks. Visit our [Institutional Page](https://www.nu.com/2026-en) ## ***About the Role*** The Operational Risk Specialist, plays a vital role within the operational risk management function at Nu Mexico. The main duties involve identifying, assessing, monitoring, and mitigating operational risks that may hinder the company from reaching its objectives. This is accomplished by developing methodologies and ensuring their implementation and execution within the first line of defense. This process includes training, review and challenge, monitoring key risk indicators, and escalating issues in appropriate Risk Forums. This role involves close collaboration with different departments and teams to execute various Operational Risk programs aimed at reducing and controlling the likelihood and impact of adverse operational risk events. ## ***You’ll be Responsible for*** 1. Lead the oversight and continuous improvement of the Op Risk Management System, ensuring that policies, methodologies, procedures, governance practices, and supporting documentation remain aligned with local regulation and global standards. 2. Lead and coordinate the annual and continuous RCSA process, maintaining high-quality risk and control matrices by ensuring that operational risks are properly identified, documented, classified, assigned to processes and business lines, and linked to accountable owners and controls. 3. Perform independent 2LoD review and challenge of 1LoD risk assessments and controls, including the evaluation of inherent risk, residual risk, control design, control execution, supporting evidence, and overall control effectiveness. 4. Own the governance and periodic maintenance of risk matrices across macroprocesses, ensuring that changes in products, processes, regulations, systems, incidents, control gaps, and organizational priorities are properly reflected, documented, and traceable in the institutional risk inventory. 5. Assess complex operational risks and define appropriate treatment strategies based on inherent and residual risk exposure, risk appetite, and tolerance thresholds, including mitigation plans, risk transfers, formal risk acceptances, and escalation of risks outside tolerance. 6. Monitor operational loss events, incidents, and control gaps; lead or support root cause analysis; ensure accurate and timely registration; and define corrective, preventive, and improvement actions to reduce the likelihood of recurrence. 7. Design, manage, and enhance the Key Risk Indicator program for priority operational risks, ensuring that each applicable risk in the RCM has measurable indicators, defined amber and red thresholds, reliable data sources, periodic monitoring, documented analysis, and appropriate escalation. 8. Evaluate operational risks associated with new products, features, processes, operational changes, and other initiatives, ensuring that potential control gaps are identified, mitigation plans are defined, and required actions are completed before launch or formal implementation. 9. Prepare and present accurate, well-structured risk reports, dashboards, and management materials for senior leadership, the Non-Financial Risk Technical Forum, the Risk Committee, and other governance bodies, ensuring consistency and traceability to the RCM, loss-event database, KRI inventory, and control-gap management tools. 10. Operate with limited direct supervision and act as a subject matter expert, providing strategic guidance, training, and constructive challenge to business areas and specialized risk teams while escalating material residual risks, control weaknesses, and non-compliance issues to the appropriate governance forums. ## ***What We're Looking For Someone Who Has*** ***Required*** - Bachelor’s degree in Business Administration, Industrial Engineer, Risk Management or related field. - Minimum of 3+ years experience in operational risk management, internal audit, compliance, consulting. - Strong knowledge of the operational risk management frameworks (RCSA, Loss Database, Third Party Risk Management, Risk assessment of new products, etc). - Strong regulatory knowledge - Excellent analytical, communication, and problem-solving skills. - Ability to work independently and collaboratively with cross-functional teams - Ability to work with databases, ETL - Experience with regulatory compliance and corporate governance standards. - Strong knowledge of Control Testing and Monitoring throughout substantive testing and Key Risk Indicators (KRIs). - Experience with Governance, Risk and Compliance (GRC) systems. - Demonstrated ability to thrive in a fast-paced, rapidly evolving environment and adapt quickly to shifting priorities and changes in processes or regulations. - Fluent in English is a must. ## ***Work Setup*** ***Location*** *Mexico City, Mexico* ***Work model*** *[Hybrid / On-Site]* ***Office requirement*** *2 - 3 days per week at the office.* ## ***Our Benefits*** ***MEXICO JOBS:*** - *Chance of earning equity at Nubank - [**Reminder**: Ops Teams don't have equity];* - *Food Card* - *NuCare – Psychological, Financial and Legal Assistance Program* - *Life Insurance* - *Medical Plan* - *Dental Plan* - *NuLanguage – Language Course Program* - *Nucleo - Our learning platform of courses* - *Extended Parental Leave* - *Daycare Allowance* - *Parental Consultancy* - *Work-from-home Allowance* - *Gym Partnerships* - *Holiday Bonus ("Aguinaldo") of 30 days of pay per year* - *17 days of paid vacation with 25% vacation bonus* - *Relocation Assistance Package, if applicable* Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.