About Nu

Nu is the leading digital bank in Latin America, serving 135 million customers across Brazil, Mexico, and Colombia. The company has been leading an industry transformation by leveraging data and proprietary technology to develop innovative products and services.
Guided by its mission to fight complexity and empower people, Nu caters to customers’ complete financial journey, promoting financial access and advancement with responsible lending and transparency. The company is powered by an efficient and scalable business model that combines low cost to serve with growing returns.
Nu’s impact has been recognized in multiple awards, including Time 100 Most Influential Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Banks.
Visit our Institutional Page

About the role

You will be the statutory Head of Internal Audit for Nubank's US entity and the primary Internal Audit point of contact for the US regulators. As Nubank builds its bank in the United States, independent assurance is what earns and keeps regulatory trust — you own that from day one.

This is not a role that only supervises other people doing the work. It is a full hands-on, build-from-scratch role: for the first 12–18 months you will operate largely on your own, performing and leading the audits yourself, with the support of Nubank's global Internal Audit team and additional resources over time as the function matures. You'll report functionally into Nubank's global Internal Audit leadership, preserving Internal Audit's independence and maintaining direct access to the US Board and Audit Committee.

You will build a modern, data-driven audit function — one that leans on automation, analytics and AI rather than traditional checklist auditing — while partnering with a young, fast-scaling business where governance and controls are still being built. Your goal: stand up and run a credible US Internal Audit function that gives the Board, the Audit and Risk Committees, and the regulators confidence that Nubank is growing in a healthy, sustainable way.

You'll be responsible for

• Acting as the statutory Head of Internal Audit for the US, representing Internal Audit before US regulators and reporting independently into Nubank's global Internal Audit leadership and the relevant Committees.

• Owning the US Internal Audit universe and risk assessment — a dynamic view of key risks across products, channels, entities and legal vehicles, including BaaS relationships and digital asset initiatives.

• Designing and executing the US audit plan, balancing standalone US work with global fieldworks, and coordinating closely with the Internal Audit hubs in Brazil, Mexico and Colombia.

• Performing and leading end-to-end audits hands-on — not only scoping and coordinating fieldwork, but often running the testing yourself — covering fintech/digital banking products, digital assets and related infrastructure, BaaS structures and partnerships, US prudential/conduct/financial-crime (AML) obligations, and governance, risk and control frameworks.

• Coordinating Internal Audit's contribution to regulatory exams and supervisory interactions, being comfortable explaining clearly what Internal Audit does before any regulator, and proactively communicating emerging risks.

• Engaging the governance bodies — Audit Committee and Risk Committee — with clear, concise, impact-oriented reporting.

• Building trust-based relationships with US senior management and second-line risk/compliance partners, operating as a trusted challenger and advisor while preserving Internal Audit's independence.

• Promoting the use of technology, data and AI in the US audit work — continuous auditing routines, data analytics, AI-assisted testing and documentation — to increase coverage and enable predictive risk monitoring.

• Acting as a culture carrier for Nubank's Internal Audit, keeping the US function fully integrated into the global audit vision and standards.

• Over time, and consistent with business and regulatory needs, designing, building and leading an appropriately resourced Internal Audit function for the bank.

We are looking for a person who has

Experience and background

• A solid Internal Audit background in financial services (as an internal or external auditor); senior second-line/compliance profiles are welcome when grounded in prior Internal Audit experience.

• Solid professional experience, with meaningful time in fintech or digital banking; a combination of digital-bank/fintech and traditional-bank experience is strongly preferred (e.g., a background bridging players such as Capital One or PayPal on one side and younger payments companies such as Block, Stripe or Robinhood on the other).

• Familiarity with US regulatory expectations for internal audit, risk management and compliance in banking/fintech (Federal Reserve, OCC, FDIC, BSA/AML). What matters is being comfortable explaining Internal Audit's role before any regulator — not experience with one specific regulator.

• Experience engaging governance bodies, specifically Audit and Risk Committees.

• Proven knowledge of fintech/digital-banking business models, BaaS structures and third-party oversight, AML/financial-crime controls and investigations, and traditional banking products and infrastructure.

Ways of working and skills

• High ownership and autonomy

• A genuinely hands-on posture

• A builder mindset

• A data-driven approach to audit: experience with data and analytics in audit or risk work; hands-on SQL/Python is a strong plus and a good signal of fit, and a strong appetite to work with data-driven testing is essential.

• Cultural openness

• Ability to analyze end-to-end processes and controls across finance, credit, payments, AML, information security, technology and governance, connecting the details to the overall risk profile.

• Excellent written and verbal communication, explaining complex topics clearly to technical and non-technical audiences, including regulators and senior executives.

• Strong stakeholder management — influencing senior leaders, challenging constructively and building trust across the three lines of defense.

• Fluent English; Spanish and/or Portuguese are strong pluses (not mandatory), given the tight integration with Latin American teams.

Nice to have

• Experience with digital assets — crypto and stablecoins. (Digital-assets experience is a plus, not a requirement.)

• No specific certification is required (CIA, CPA, CISA, etc. are welcome but not mandatory).

Location for this opportunity

• Miami, United States

• Flexibility for Palo Alto or Washington DC as well

Our Benefits

• Opportunity of earning equity at Nu

• Medical Insurance

• Dental and Vision Insurance

• Life Insurance and AD&D

• Extended maternity and paternity leaves

• Nucleo - Our learning platform of courses

• NuLanguage - Our language learning program

• NuCare - Our mental health and wellness assistance program

• 401K

• Saving Plans - Health Saving Account and Flexible Spending Account

• Work-from-home Allowance

• Relocation Assistance Package, if applicable.

Work Model for this Role

• Hybrid 2-3 times/week: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/

Explore how we build technology at Nubank:

🔗 building.nubank.com.br ↗

🎥 youtube.com/@building.nubank ↗

🎧 Listen to our stories on Spotify ↗

Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.