Principal Internal Auditor

You will be the statutory Head of Internal Audit for Nubank's US entity and the primary Internal Audit point of contact for the US regulators. As Nubank builds its bank in the United States, independent assurance is what earns and keeps regulatory trust — you own that from day one. This is not a role that only supervises other people doing the work. It is a full hands-on, build-from-scratch role: for the first 12–18 months you will operate largely on your own, performing and leading the audits yourself, with the support of Nubank's global Internal Audit team and additional resources over time as the function matures. You'll report functionally into Nubank's global Internal Audit leadership, preserving Internal Audit's independence and maintaining direct access to the US Board and Audit Committee.

Responsibilities

Acting as the statutory Head of Internal Audit for the US, representing Internal Audit before US regulators and reporting independently into Nubank's global Internal Audit leadership and the relevant Committees; Owning the US Internal Audit universe and risk assessment — a dynamic view of key risks across products, channels, entities and legal vehicles, including BaaS relationships and digital asset initiatives; Designing and executing the US audit plan, balancing standalone US work with global fieldworks, and coordinating closely with the Internal Audit hubs in Brazil, Mexico and Colombia; Performing and leading end-to-end audits hands-on — not only scoping and coordinating fieldwork, but often running the testing yourself — covering fintech/digital banking products, digital assets and related infrastructure, BaaS structures and partnerships, US prudential/conduct/financial-crime (AML) obligations, and governance, risk and control frameworks; Coordinating Internal Audit's contribution to regulatory exams and supervisory interactions, being comfortable explaining clearly what Internal Audit does before any regulator, and proactively communicating emerging risks; Engaging the governance bodies — Audit Committee and Risk Committee — with clear, concise, impact-oriented reporting; Building trust-based relationships with US senior management and second-line risk/compliance partners, operating as a trusted challenger and advisor while preserving Internal Audit's independence; Promoting the use of technology, data and AI in the US audit work — continuous auditing routines, data analytics, AI-assisted testing and documentation — to increase coverage and enable predictive risk monitoring; Acting as a culture carrier for Nubank's Internal Audit, keeping the US function fully integrated into the global audit vision and standards; Over time, and consistent with business and regulatory needs, designing, building and leading an appropriately resourced Internal Audit function for the bank

Requirements

Solid Internal Audit background in financial services (as an internal or external auditor); Solid professional experience, with meaningful time in fintech or digital banking; Familiarity with US regulatory expectations for internal audit, risk management and compliance in banking/fintech (Federal Reserve, OCC, FDIC, BSA/AML); Experience engaging governance bodies, specifically Audit and Risk Committees; Proven knowledge of fintech/digital-banking business models, BaaS structures and third-party oversight, AML/financial-crime controls and investigations, and traditional banking products and infrastructure; High ownership and autonomy; A genuinely hands-on posture; A builder mindset; A data-driven approach to audit: experience with data and analytics in audit or risk work; hands-on SQL/Python is a strong plus and a good signal of fit, and a strong appetite to work with data-driven testing is essential; Cultural openness; Ability to analyze end-to-end processes and controls across finance, credit, payments, AML, information security, technology and governance, connecting the details to the overall risk profile; Excellent written and verbal communication, explaining complex topics clearly to technical and non-technical audiences, including regulators and senior executives; Strong stakeholder management — influencing senior leaders, challenging constructively and building trust across the three lines of defense; Fluent English; Spanish and/or Portuguese are strong pluses (not mandatory)

Nice to have

Experience with digital assets — crypto and stablecoins; Spanish and/or Portuguese; CIA, CPA, CISA certifications

Benefits

Opportunity of earning equity at Nu; Medical Insurance; Dental and Vision Insurance; Life Insurance and AD&D; Extended maternity and paternity leaves; Nucleo - Our learning platform of courses; NuLanguage - Our language learning program; NuCare - Our mental health and wellness assistance program; 401K; Saving Plans - Health Saving Account and Flexible Spending Account; Work-from-home Allowance; Relocation Assistance Package, if applicable