IT Risk Specialist

About the Role

We are a leading fintech company in Mexico, at the forefront of revolutionizing financial services through technology and innovation in Latin America. We are seeking a dynamic and experienced IT Risk Specialist to support the execution of the IT Risk programs and activities within the Non Financial Risk squad in Nu Mexico. This role combines strategic oversight of IT risk management, ensuring our organization is well-positioned to navigate and fight the complexities of the environment.

Key Responsibilities

• Perform, oversee and provide advisory on the identification, assessment, and mitigation of IT risks, incorporating innovative risk management practices and technology solutions.
• Evaluate existing IT systems, applications (e.g., microservices, webapps, mobile apps, etc.), IT third-party vendors such as SAAS, professional IT services, BPOs, APIs, and telecommunications infrastructure to support the implementation of Risk and Control Self Assessment Program (RCSA).
• Conduct independent control tests to verify the effectiveness of the IT control environment of the company, identify and document IT control gaps, and recommend risk mitigants.
• Establish and connect action plans for risk mitigation with the risk governance methodology of the firm.
• Execute technology risk assessments on new products & features according to the internal standard methodologies, policies and general practices.
• Generate and submit regulatory reports on IT risk for senior management, regulatory bodies and relevant committees.
• Provide oversight and subject matter expertise in IT and cybersecurity risk during the implementation of new IT systems, telecommunication infrastructure, and third-party services, as well as on relevant changes in existing technology and infrastructures supporting business products in Mexico.
• Monitor Engineering, Data and Cybersecurity incidents, perform independent analysis of root causes and risks, propose action plans to improve the control environment, analyze incident information to generate reports and metrics, and connect the action plans with the risk governance methodology of the firm.
• Support the monitoring of emerging IT & cyber risks, new threats, and infrastructure and application vulnerabilities.
• Enhance and maintain robust frameworks and policies for IT risk management and IT third-party risk management, aligned with global standards and meeting local regulatory requirements.
• Serve as a key advisor to risk leadership and internal stakeholders on IT risk matters, ensuring transparent communication and effective stakeholder management.
• Stay ahead of evolving regulatory guidelines, technological advancements, and industry best practices in risk management, applying insights to strengthen our risk posture.

Requirements

Benefits

Diversity and Inclusion at Nu

We want to build products and experiences for everyone who wants to take back control over their finances, that's why we build strong and diverse teams that rise up to the challenge. We are a team of the most creative people in technology, and we hire under equal opportunity, irrespective of gender, ethnicity, religion, sexual orientation or background. We are proud to say that 30% of our team recognize themselves as part of the LGBTQ+ community, and 40% of our team identify as women, in all positions and seniority levels. We are a very process-light organization that values human interactions, and that is a very important part of our culture. At Nu, everyone has the opportunity to speak up and participate, grow and share ideas.

#J-18808-Ljbffr