Nubank

Digital Affairs & DPO Senior Specialist

Miami · Senior

Sponsorship not specifiedDetected 3 days ago

Machine LearningIncident ResponseComplianceProduct ManagementJiraConfluenceStakeholder ManagementProcurementLeadershipCommunicationCollaboration

About the role

Protecting personal data is fundamental to maintaining the fanatical trust our customers place in us.
This role ensures that as Nubank expands its footprint and launches data‑intensive products (including in the US), our privacy and AI governance remain compliant, scalable, business‑enabling and deeply embedded into our technology and product lifecycle.
Product Legal Counseling (Privacy, Data Protection & AI)

Translate complex and evolving US and international privacy/AI requirements into simple, operational guidance and design patterns for squads, avoiding "legal black boxes" and enabling self‑service where possible.
Partner with CS/Ops and engineering teams to scale DSR handling, ensuring consistent identity verification, response quality and SLA adherence without increasing operational headcount.
Support the design and continuous improvement of privacy notices, in‑product privacy UX and choice mechanisms for US users, ensuring alignment with global standards and local requirements.
Support Digital Affairs and Public Policy teams in monitoring, interpreting and prioritizing US and international privacy, data and AI regulatory developments, connecting them with concrete risks and opportunities for Nubank's products.
Our recruitment process may involve the use of artificial intelligence-enabled tools, such as automated interview transcription and analysis, to support the evaluation process.

Record of Processing Activities (RoPA) and personal data mapping;
Privacy and data protection risk management and controls;
DPIAs/PIAs and other privacy risk assessments at scale;
Global data subject rights (DSR) strategy and processes;
Training, awareness and privacy metrics.
Assess third parties and new data‑sharing arrangements (including US vendors and cross‑border engagements) from a privacy and AI‑governance perspective, recommending proportionate controls and contractual protections.
Enhance end‑to‑end third‑party due diligence and oversight flows together with Procurement, Security, Risk and Data, ensuring that privacy controls are embedded in onboarding, monitoring and off‑boarding.
Coordinate and continuously improve the global privacy incident response process, focusing on impact assessments, escalation, remediation and documentation that stand up to regulatory scrutiny in the US and abroad.

Excellent written and verbal communication skills in English; Portuguese or Spanish is a plus.
Demonstrated track record of leading complex privacy and/or AI matters end‑to‑end, such as:
Launching or significantly redesigning data‑intensive products under US and international privacy rules;
Implementing or maturing a privacy governance or AI governance framework;
Leading or advising on complex data or AI incidents and regulatory interactions.

Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia.
The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services.
Guided by its mission to fight complexity and empower people, Nu caters to customers' complete financial journey, promoting financial access and advancement with responsible lending and transparency.

Maintain and enhance how Nubank handles data subject rights requests across geographies, with particular focus on US privacy rights (e.g., access, deletion, correction, portability, opt‑out mechanisms, sensitive data rules under state law

This listing is sourced directly from Nubank's careers page and normalized into a canonical job model.