Lead Business Control Officer (Crypto & Digital Assets)

<h2><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><strong>About Nubank</strong></span></h2> <p><span style="font-family: helvetica, arial, sans-serif;">Nubank was founded in 2013 to free people from a bureaucratic, slow, and inefficient financial system. Since then, through innovative technology and outstanding customer service, the company has been redefining people's relationships with money across Latin America. With operations in Brazil, Mexico, and Colombia, Nubank is today one of the largest digital banking platforms and technology-leading companies in the world.</span></p> <p><span style="font-family: helvetica, arial, sans-serif;">Today, Nubank is a global company with offices in São Paulo (Brazil), Mexico City (Mexico), Buenos Aires (Argentina), Bogotá (Colombia), Durham (United States), and Berlin (Germany). It was founded in 2013 in São Paulo by Colombian David Vélez, and co-founded by Brazilian Cristina Junqueira and American Edward Wible. For more information, visit <a href="https://www.nubank.com.br">www.nubank.com.br</a>.</span></p> <h3><span style="font-size: 12pt; font-family: helvetica, arial, sans-serif;"><strong><br>About the Team</strong></span></h3> <p><span style="font-family: helvetica, arial, sans-serif;">To support Nubank’s global expansion and navigate an increasingly complex landscape, we have established the Business Control Office (BCO)—a dedicated domain within the Product Chapter. While our 2nd Line of Defense (2LoD) provides the foundational risk structure, the BCO is designed to embed risk management directly into the 1st Line of Defense. By shifting these capabilities closer to the product, we ensure that growth is proactive and resilient against process failures or data leakages without adding unnecessary bureaucracy.</span></p> <h3><span style="font-family: helvetica, arial, sans-serif;"><strong><br><span style="font-size: 12pt;">About the Role</span></strong></span></h3> <p><span style="font-family: helvetica, arial, sans-serif;">The BCO will leverage business and risk knowledge coupled with a hands-on approach. In this role, you will both support and own the risk activities essential to the business. You will work with teams to mitigate identified risks while establishing yourself as the subject-matter expert (SME) within your assigned area.</span></p> <p><span style="font-family: helvetica, arial, sans-serif;">For this position, the business area is Global Crypto &amp; Digital Assets. You will be at the forefront of one of the fastest-evolving regulatory landscapes in finance. You are not just a risk manager; you are a Product Compliance strategist with a passion for crypto. You will act as the First-Line accountability owner, translating a shifting global patchwork of requirements—from the Brazilian Crypto Framework (Law 14.478/2022) to emerging international standards like MiCA (EU), the Travel Rule (FATF), and evolving SEC/CFTC mandates—into simple, actionable product requirements and standards.</span></p> <p><span style="font-family: helvetica, arial, sans-serif;">The ideal candidate understands that in crypto, a "License to Operate" is a moving target. You will bridge the gap between 2nd Line (Compliance/Legal) guidance and 1st Line execution, ensuring our product ecosystem remains resilient and compliant by design. You will own accountability for the integrity of evidence and monitoring, ensuring that as we scale globally, our controls are as innovative as our products.</span></p> <p><span style="font-family: helvetica, arial, sans-serif;">Additionally, you will provide SME knowledge to support Nubank’s industry representation. This involves collaborating with industry associations, regulators, and international market forums—including participation in public consultations—through the lens of Compliance, Legal, and Public Policy.</span></p> <p><span style="font-family: helvetica, arial, sans-serif;">Fluent English is mandatory due to daily interaction with global business and product stakeholders.</span></p> <h3><span style="font-family: helvetica, arial, sans-serif;"><strong><br><span style="font-size: 12pt;">As a BCO you will</span></strong></span></h3> <ul> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;"><span style="text-decoration: underline;">Proactive Regulatory Remediation:</span> Identify potential compliance gaps within the product and drive the remediation activities needed to align with evolving global mandates.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;"><span style="text-decoration: underline;">Establish Compliance Governance:</span> Create appropriate 1st-line governance within the Business Unit to facilitate the implementation, execution, and monitoring of regulatory controls within squads.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;"><span style="text-decoration: underline;">Compliance Orchestration: </span>Partner with 2LoD on regulatory interpretation while driving the completion of 1st-line action plans and deadlines, supporting Product Managers to ensure the roadmap remains on track.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;"><span style="text-decoration: underline;">Define the Regulatory Environment: </span>Map and rate the compliance landscape, ensuring the business understands its obligations across different jurisdictions.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;"><span style="text-decoration: underline;">Embedding Guardrails:</span> Engage deeply with product flows (e.g., staking, transfers) to proactively embed compliance guardrails, preventing and escalating potential gaps with a structured controls mindset<strong>.</strong></span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;"><span style="text-decoration: underline;">Challenge &amp; Validate Controls: </span>Support Product teams with the design and implementation of controls to ensure they meet regulatory intent; define solutions for new controls to address emerging requirements.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;"><span style="text-decoration: underline;">Strategic Compliance Reporting:</span><strong> </strong>Create reports for the leadership team to provide visibility into the full spectrum of regulatory health and "License to Operate" status.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;"><span style="text-decoration: underline;">Product Development Lens:<strong> </strong></span>Apply a specialized compliance lens to the product strategy, ensuring new features are built with regulatory requirements in mind from day one.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;"><span style="text-decoration: underline;">Documentation &amp; Knowledge Management: </span>Drive the completion of documentation for all compliance processes to ensure transparency and minimize "single-point-of-failure" sensitivities.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;"><span style="text-decoration: underline;">Process &amp; Control Mapping:<strong> </strong></span>Support internal control BCOs with deep-dive mapping of the product lifecycle to identify and strengthen key compliance touchpoints.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;"><span style="text-decoration: underline;">Audit &amp; Inspection Liaison:</span> Coordinate responses for regulatory inspections, providing the necessary evidence while reviewing and challenging findings to ensure they reflect the business reality.</span></li> </ul> <p><span style="font-family: helvetica, arial, sans-serif;">Additional responsibilities specific to this Crypto &amp; Digital Assets regulatory focused role:</span></p> <ul> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Crypto-Native Product Design:<strong> </strong>Translate complex global mandates (e.g., FATF Travel Rule, custody standards) into pragmatic product requirements and user stories, ensuring compliance is built into every feature.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Industry Advocacy: Coordinate 1st-line participation in international public consultations and industry discussions to help shape the evolving global crypto agenda.</span></li> </ul> <h3><span style="font-family: helvetica, arial, sans-serif;"><strong><br><span style="font-size: 12pt;">What we are looking for</span></strong></span></h3> <ul> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Experience with implementing crypto &amp; digital asset regulation,<strong> </strong>and a working understanding of global frameworks (e.g., MiCA, NYDFS BitLicense, FATF guidance).</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Ability to translate complex crypto regulation and compliance guidance into business requirements.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Experience with the crypto-banking regulatory environment.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Ability to speak the "language" of product managers and engineers.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">High level of independence and a "hands-on" ownership mindset.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Excellent communication skills (concise and clear).</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Ability to build strong relationships across all levels of the organization.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">A quick learner who wants to challenge the status quo and prioritize effectively.</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Fluent Professional English (daily operational use).</span></li> </ul> <h3><span style="font-family: helvetica, arial, sans-serif;"><strong><br></strong>Our Benefits</span></h3> <ul> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Chance of earning equity at Nubank</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Public Transportation Commuting Benefit (Vale-Transporte)</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">NuCare – Psychological, Financial and Legal Assistance Program</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Life Insurance</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Medical Plan</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Dental Plan</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">NuLanguage – Language Course Program</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Nucleo - Our learning platform of courses</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Extended Parental Leave</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Daycare Allowance</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Parental Consultancy</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Work-from-home Allowance</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Gym Partnerships</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">30 days of paid vacation</span></li> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">Relocation Assistance Package, if applicable</span></li> </ul> <h3><span style="font-family: helvetica, arial, sans-serif;"><strong><br><span style="font-size: 12pt;">Location for this Opportunity</span></strong></span></h3> <ul> <li style="font-family: helvetica, arial, sans-serif;"><span style="font-family: helvetica, arial, sans-serif;">São Paulo, Brazil</span><br><br></li> </ul> <h3><span style="font-family: helvetica, arial, sans-serif;"><strong>Working Model for this Role</strong></span></h3> <p><span style="font-family: helvetica, arial, sans-serif;"><strong>Hybrid 2-3 times/week</strong>: Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit <a href="https://building.nubank.com/nu-hybrid-work-model/">https://building.nubank.com/nu-hybrid-work-model/</a></span></p> <p>&nbsp;</p>