3PP Specialist

About Nu Nu was founded in 2013 to free people from bureaucratic, slow and inefficient financial systems. Since then, through innovative technology and outstanding customer service, the company has been redefining people's relationships with money across Latin America. With operations in Brazil, Mexico, and Colombia, Nubank is today one of the largest digital banking platforms and technology-leading companies in the world. Today, Nubank is a global company, with offices in São Paulo (Brazil), Mexico City (Mexico), Bogotá (Colombia), Buenos Aires (Argentina), Durham (United States), and Berlin (Germany), with operations only in the first three. It was founded in 2013 in Sao Paulo, by Colombian David Vélez, and cofounded by Brazilian Cristina Junqueira and American Edward Wible. About the role: The 3PP Specialist (Mexico) is the dedicated guardian and owner of Nu's critical Third-Party Provider (3PP) process within our regulated banking operations in Mexico. This role ensures that all steps and governance are observed, the cadence is maintained, and that governance frameworks are consistently applied. The specialist coordinates the various internal stakeholders involved in the CNBV prior authorization process, ensuring regulatory compliance and efficient operations. This role supports and enables the Contract Owners (who are accountable for individual 3PP files and their authorization) by providing process expertise, consistency checks, and facilitating cross-functional collaboration, without directly owning content creation or leading direct vendor interactions. Key Responsibilities: 3PP Process Governance & Ownership (The Guardian Role): Define, maintain, and rigorously execute Nu's end-to-end CNBV approval process for all critical 3PPs, ensuring its integrity, efficiency, and full compliance with regulatory requirements. This includes establishing clear guidelines for determining the need for CNBV filing or contract/service adjustments. Establish and enforce the cadence for 3PP reviews and monitoring, proactively engaging Contract Owners to identify and address any unmapped changes or potential deviations from approved scope. Ensure the continuous maintenance of 3PP governance, including formal designation and training of a backup to guarantee operational continuity and resilience during critical CNBV response periods. Oversee the formal off-boarding process for 3PPs, ensuring all regulatory and internal requirements are met. CNBV Regulatory Orchestration & Submission Support: Facilitate and support the CNBV prior authorization process for all new and existing critical 3PPs, guiding Contract Owners through the activation, coordination, and submission of all required documentation. Ensure the highest quality and consistency of all regulatory filings, performing rigorous file consistency checks (e.g., terminology, format across documents) and supporting Contract Owners in the formal sign-off on content submissions (e.g., F-SA, Service Format, Technical Format, Information Security Format, Manifestaciones artículo 318, Corporate Governance presentation). Support Contract Owners in preparing for and presenting comprehensive assessments of 3PP impact (quantitative and qualitative, per Art 318, subsection VII) to the Risk Committee for formal approval, ensuring all regulatory requirements are met. Coordinate responses to CNBV inquiries, clarifications, and follow-up questions by "crunching" requirements and helping Contract Owners identify and distribute specific inquiries across relevant stakeholders (e.g., Legal, IT). Consume inputs from the Legal team regarding changes in Mexican banking regulations (CNBV) pertaining to 3PPs, and activate Contract Owners to assess potential impacts on the 3PPs they manage. 3PP Lifecycle Management & Stakeholder Coordination: Oversee the entire lifecycle of critical 3PPs in Mexico, from initial regulatory classification and due diligence to contract review, ongoing performance monitoring, and offboarding, ensuring continuous alignment with both CNBV requirements and Nu's operational needs. Ensure all contractual adjustments, significant changes to authorized services, or operational modifications are promptly and accurately notified to the CNBV via established processes. Oversee the translation and localization of documentation into Spanish, actively requesting Spanish versions from vendors to facilitate regulatory processes. Determine and mobilize resources, coordinate, and ensure prioritization around 3PP activities, including the efficient distribution of file sections across multiple stakeholders with clear deadlines. Support file writing and comments responding processes, ensuring high-quality and timely submissions. Proactively identify service-related changes in projects or regulatory changes that may impact current or new 3PPs, and effectively communicate these to relevant stakeholders. Qualifications: Mandatory: Proven, in-depth experience (5+ years) in third-party risk management, regulatory compliance, or process management specifically within the Mexican banking sector. Mandatory: Expert-level understanding and practical experience with CNBV regulations (e.g., General Provisions applicable to credit institutions) pertaining to the contracting and management of third-party service providers for banks in Mexico. Demonstrated experience in successfully navigating and managing complex regulatory authorization processes, including preparing and supporting the submission of extensive documentation to regulatory bodies. Strong project management and coordination skills, with the ability to manage multiple complex processes, extensive documentation, and diverse stakeholders simultaneously. Exceptional communication skills, both written and verbal, in English and Spanish, with the ability to articulate complex regulatory requirements clearly and persuasively to both internal teams and external regulators. Ability to work autonomously, prioritize effectively under pressure, and thrive in a fast-paced, highly regulated banking environment. Change Management & Process Optimization: Ability to design and implement new workflows to move the organization away from "emergency demands" toward a sustainable cadence. Strategic Vendor Relations: Skill in "sensitizing" external partners to regulatory needs to ensure they provide the correct assistance from the start. Knowledge Management: Proficiency in setting up and maintaining document filing systems or repositories to eliminate information fragmentation. Technical/Legal Translation Oversight: While they don't need to be a translator, they should have the ability to manage the localization of complex technical and legal documentation into Spanish effectively. Negotiation & Influence: The ability to push back on unrealistic internal timelines and align different departments (Legal, Procurement, IT) toward a unified goal. Benefits 17 days paid vacation per year. Life insurance. Health insurance. NuLanguage Program NuCare Program Extended Parental Leave Our Nu Way of Working: The Nu Way of Working is our hybrid work model that was created so people could collaborate more in person and still keep the flexibility of remote work. Starting in July 2026 we will attend the office 2 days a week and by January 2027 3 days a week. In this case in our Mexico City Office. *Interviewing and onboarding are currently done virtually. From July 2022 forward, teams will have a suggested cadence of visiting the office in which employees go to their Business Unit's (BU) base location. Employees will have an employment contract based on the cities where Nu’s offices are located, considering their country of hire. More details can be shared during your hiring process.