US CISO

Nubank • Palo Alto, CA

3d

About The Position

As Nubank expands its footprint into the US, we are seeking a visionary, highly specialized US Chief Information Security Officer (CISO). This is not a traditional operational CISO role. You will serve as the executive pillar for Nubank’s US strategy, bridging the gap between traditional financial regulations and modern, hyper-scalable crypto and AI technology platforms. You will act as the point of accountability for US regulatory bodies, lead governance transformations, and oversee critical cross-functional security domain leadership. We are looking for a security leader who balances deep traditional banking compliance expertise with a forward-looking understanding of cryptocurrency protocols and artificial intelligence security.

As the US CISO, you will architect, establish, and operationalize a unified US security and compliance posture. You will protect customer trust, satisfy strict US regulatory frameworks (e.g., OCC compliance), and secure frontier technology initiatives ensuring Nubank’s platform remains resilient, future-proof, and compliant as we scale globally.

Requirements

• 15+ years in Information Security, with significant experience operating at an executive, director, or CISO level within FinTech, Banking, or Digital Assets.
• Deep hands-on experience navigating US regulatory environments, specifically working with the OCC, statutory disclosure processes, and financial institution compliance.
• Demonstrated domain expertise in cryptocurrency security, decentralized finance, or digital asset platforms.
• Familiarity with modern AI security risks, LLM integrations, safe code generation tools, and model security.
• Proven track record of rebuilding or scaling GRC frameworks within complex, multi-national organizations.
• Exceptional communication skills needed to interface effectively with regulatory examiners, executive leadership, and board members.
• Fluency in English is required
• Strong people leadership at scale, including developing managers and leading teams of differing maturity through change and ambiguity.
• Excellent stakeholder management and communication, with maturity in negotiation and conflict resolution across senior cross-functional partners.
• A pragmatic, hybrid profile, balanced across people leadership, product sensibility, and technical depth rather than weighted to any single one.
• A genuine product mindset focused on customer and agent outcomes, with the technical depth to raise the bar in architectural discussions.

Nice To Haves

• Experience at leading crypto-native institutions or hyper-growth FinTechs is highly valued.
• Portuguese and/or Spanish are a plus.

Responsibilities

• Serve as the primary US security authority and point of contact for regulators (e.g. OCC).
• Oversee all mandatory statutory disclosures, including financial and IBFR background reviews.
• Partner with crypto product and infrastructure teams to secure future-proof financial technologies, translating complex blockchain architectures into compliant, enterprise-grade risk frameworks.
• Uplevel Nubank’s GRC program to support multi-geography scaling.
• Lead the strategic security response for AI initiatives—from developer workflows and engineering toolsets to model integrity and deployment risks.
• Design, build, and deploy an end-to-end enterprise Insider Threat program across first and second lines of defense in close partnership with Risk and Legal teams.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive
• Education Level: No Education Listed