Chief Information Security Officer

About the role

Technology is intrinsic to every area at Nu, and the company is experiencing hyper‑growth across customers, products, markets and employees. The Chief Information Security Officer will lead the strategy to eradicate threats across complex, regulated environments, ensuring rapid incident response and compliance with financial‑sector regulations.

Key responsibilities

• Report and resolve security incidents at scale while building solutions for faster response.
• Work in regulated environments, aligning with all compliance requirements.
• Communicate clearly with regulators, managers and other stakeholders in English and Spanish.
• Assess security gaps across technologies and business contexts, designing risk‑treatment plans.
• Develop and implement policies and procedures for information security, physical security, fraud prevention and cyber risk management.
• Collaborate with cross‑functional teams to translate business requirements into technical specifications and vice‑versa.
• Define guidelines and best practices that empower teams to work securely and efficiently.
• Support and mentor other security engineers, fostering continuous learning.

Required profile

• Solid experience in information and business security, privacy, risk management and IT governance.
• Ability to thrive in engineering environments and engage in technical discussions.
• Practical knowledge of cloud infrastructure, microservices and distributed systems.
• Hands‑on experience implementing technical controls based on industry best practices.
• Experience working in regulated financial institutions and interacting with external and internal stakeholders.
• Knowledge of ISO, PCI, NIST, MITRE ATT&CK and CSF frameworks.
• Familiarity with Colombian regulations for financial‑sector information security.
• Strong communication and problem‑solving skills, fluent in English and Spanish.

Required skills

• Cloud infrastructure (private or public)
• Microservices architecture
• Distributed environments
• ISO 27001, PCI DSS, NIST frameworks
• MITRE ATT&CK and CSF frameworks
• Incident response processes
• Ticketing and collaboration tools (e.g., Google Docs, dashboards)

What we offer

• Opportunity to earn equity at Nu
• Extended maternity and paternity leaves
• Health and life insurance
• NuCare mental‑health and wellness assistance
• Access to Nucleo learning platform and NuLanguage language program
• 15 vacation days and gym partnership
• Work‑from‑home allowance
• Parental consultancy and relocation assistance package