Digital Affairs & DPO Senior Specialist

Privacy and data protection risk management and controls;

DPIAs/PIAs and other privacy risk assessments at scale;

Global data subject rights (DSR) strategy and processes;

Training, awareness and privacy metrics. - Design and implement projects to simplify and automate privacy governance wherever possible (e.g., templates, workflows, playbooks, self‑service tools), balancing regulatory expectations with business velocity. Data Subject Rights, Transparency & US‑Focused Governance

Maintain and enhance how Nubank handles data subject rights requests across geographies, with particular focus on US privacy rights (e.g., access, deletion, correction, portability, opt‑out mechanisms, sensitive data rules under state laws). - Partner with CS/Ops and engineering teams to scale DSR handling, ensuring consistent identity verification, response quality and SLA adherence without increasing operational headcount. - Support the design and continuous improvement of privacy notices, in‑product privacy UX and choice mechanisms for US users, ensuring alignment with global standards and local requirements. Third‑Party & Data Sharing Governance

Assess third parties and new data‑sharing arrangements (including US vendors and cross‑border engagements) from a privacy and AI‑governance perspective, recommending proportionate controls and contractual protections. - Enhance end‑to‑end third‑party due diligence and oversight flows together with Procurement, Security, Risk and Data, ensuring that privacy controls are embedded in onboarding, monitoring and off‑boarding. Privacy Incident Response & Regulatory Readiness

Coordinate and continuously improve the global privacy incident response process, focusing on impact assessments, escalation, remediation and documentation that stand up to regulatory scrutiny in the US and abroad. - Lead or co‑lead privacy/legal workstreams in complex incidents (including those involving US data subjects or US regulators), advising on notification strategy to individuals, DPAs and other authorities. - Contribute to regulatory‑readiness initiatives (audits, supervisory processes, evidence frameworks) that demonstrate maturity of Nubank’s privacy and AI governance program. Digital Public Policy & Institutional Positioning (Privacy, Data & AI)

Support Digital Affairs and Public Policy teams in monitoring, interpreting and prioritizing US and international privacy, data and AI regulatory developments, connecting them with concrete risks and opportunities for Nubank’s products. - Help craft clear, well‑reasoned positions for Nubank in consultations, hearings, industry forums and regulatory dialogues, ensuring consistency between our public narrative and our internal governance. - Identify where product, governance and advocacy work should reinforce each other (e.g., aligning DPIA/AI risk frameworks with emerging US and EU AI rules). Cross‑Functional Leadership & Ways of Working

Act as a senior, trusted counterpart for leaders in Product, Tech, Data, Security, Risk, Compliance and Operations on privacy and digital governance topics. - Mentor and upskill peers and more junior team members (in Digital Legal and DPO) on US privacy/AI topics, complex governance problems and stakeholder management, while operating as an individual contributor (IC). - Use Nubank’s hybrid work model to collaborate effectively across time zones and locations, making extensive use of asynchronous tools (Docs, Slides, Slack, Jira, Confluence, AI tools). ### We are looking for a person who has: