Operational Risk Senior Specialist

ABOUT NU

Nu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.

Proprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability.

Visit our Institutional Page https://www.nu.com/2026-en

ABOUT THE ROLE

The Operational Risk Specialist, plays a vital role within the operational risk management function at Nu Mexico. The main duties involve identifying, assessing, monitoring, and mitigating operational risks that may hinder the company from reaching its objectives. This is accomplished by developing methodologies and ensuring their implementation and execution within the first line of defense. This process includes training, review and challenge, monitoring key risk indicators, and escalating issues in appropriate Risk Forums. This role involves close collaboration with different departments and teams to execute various Operational Risk programs aimed at reducing and controlling the likelihood and impact of adverse operational risk events.

YOU’LL BE RESPONSIBLE FOR

• Lead the oversight and continuous improvement of the Op Risk Management System, ensuring that policies, methodologies, procedures, governance practices, and supporting documentation remain aligned with local regulation and global standards.

• Lead and coordinate the annual and continuous RCSA process, maintaining high-quality risk and control matrices by ensuring that operational risks are properly identified, documented, classified, assigned to processes and business lines, and linked to accountable owners and controls.

• Perform independent 2LoD review and challenge of 1LoD risk assessments and controls, including the evaluation of inherent risk, residual risk, control design, control execution, supporting evidence, and overall control effectiveness.

• Own the governance and periodic maintenance of risk matrices across macroprocesses, ensuring that changes in products, processes, regulations, systems, incidents, control gaps, and organizational priorities are properly reflected, documented, and traceable in the institutional risk inventory.

• Assess complex operational risks and define appropriate treatment strategies based on inherent and residual risk exposure, risk appetite, and tolerance thresholds, including mitigation plans, risk transfers, formal risk acceptances, and escalation of risks outside tolerance.

• Monitor operational loss events, incidents, and control gaps; lead or support root cause analysis; ensure accurate and timely registration; and define corrective, preventive, and improvement actions to reduce the likelihood of recurrence.

• Design, manage, and enhance the Key Risk Indicator program for priority operational risks, ensuring that each applicable risk in the RCM has measurable indicators, defined amber and red thresholds, reliable data sources, periodic monitoring, documented analysis, and appropriate escalation.

• Evaluate operational risks associated with new products, features, processes, operational changes, and other initiatives, ensuring that potential control gaps are identified, mitigation plans are defined, and required actions are completed before launch or formal implementation.

• Prepare and present accurate, well-structured risk reports, dashboards, and management materials for senior leadership, the Non-Financial Risk Technical Forum, the Risk Committee, and other governance bodies, ensuring consistency and traceability to the RCM, loss-event database, KRI inventory, and control-gap management tools.

• Operate with limited direct supervision and act as a subject matter expert, providing strategic guidance, training, and constructive challenge to business