Nubank is hiring a 3PP Specialist

The 3PP Specialist (Mexico) is responsible for overseeing Nu's end-to-end Third-Party Provider (3PP) regulatory process within Mexico’s banking operations, ensuring compliance with CNBV requirements. This role acts as the process guardian, coordinating internal stakeholders, maintaining governance frameworks, and supporting regulatory submissions without direct vendor management, as part of Nubank's commitment to regulatory excellence.

What You'll Do

• Define, maintain, and rigorously execute Nu's end-to-end CNBV approval process for all critical 3PPs, ensuring integrity, efficiency, and full compliance with regulatory requirements.
• Establish clear guidelines for determining the need for CNBV filing or contract/service adjustments.
• Establish and enforce the cadence for 3PP reviews and monitoring, proactively engaging Contract Owners to identify and address unmapped changes or deviations from approved scope.
• Ensure the continuous maintenance of 3PP governance, including formal designation and training of a backup to guarantee operational continuity and resilience during critical CNBV response periods.
• Oversee the formal off-boarding process for 3PPs, ensuring all regulatory and internal requirements are met.
• Facilitate and support the CNBV prior authorization process for all new and existing critical 3PPs, guiding Contract Owners through activation, coordination, and submission of required documentation.
• Ensure the highest quality and consistency of all regulatory filings, performing rigorous file consistency checks (e.g., terminology, format across documents).
• Support Contract Owners in the formal sign-off on content submissions (e.g., F-SA, Service Format, Technical Format, Information Security Format, Manifestaciones artículo 318, Corporate Governance presentation).
• Support Contract Owners in preparing for and presenting comprehensive assessments of 3PP impact (quantitative and qualitative, per Art 318, subsection VII) to the Risk Committee for formal approval.
• Coordinate responses to CNBV inquiries, clarifications, and follow-up questions by 'crunching' requirements and helping Contract Owners distribute specific inquiries across relevant stakeholders (e.g., Legal, IT).
• Consume inputs from the Legal team regarding changes in Mexican banking regulations (CNBV) pertaining to 3PPs, and activate Contract Owners to assess potential impacts on the 3PPs they manage.
• Oversee the entire lifecycle of critical 3PPs in Mexico, from initial regulatory classification and due diligence to contract review, ongoing performance monitoring, and offboarding.
• Ensure all contractual adjustments, significant changes to authorized services, or operational modifications are promptly and accurately notified to the CNBV via established processes.
• Oversee the translation and localization of documentation into Spanish, actively requesting Spanish versions from vendors to facilitate regulatory processes.
• Determine and mobilize resources, coordinate, and ensure prioritization around 3PP activities, including the efficient distribution of file sections across multiple stakeholders with clear deadlines.
• Support file writing and comments responding processes, ensuring high-quality and timely submissions.
• Proactively identify service-related changes in projects or regulatory changes that may impact current or new 3PPs, and effectively communicate these to relevant stakeholders.

What We're Looking For

• Proven, in-depth experience (5+ years) in third-party risk management, regulatory compliance, or process management specifically within the Mexican banking sector.
• Expert-level understanding and practical experience with CNBV regulations (e.g., General Provisions applicable to credit institutions) pertaining to the contracting and management of third-party service providers for banks in Mexico.
• Demonstrated experience in successfully navigating and managing complex regulatory authorization processes, including preparing and supporting the submission of extensive documentation to regulatory bodies.
• Strong project management and coordination skills, with the ability to manage multiple complex processes, extensive documentation, and diverse stakeholders simultaneously.
• Exceptional communication skills, both written and verbal, in English and Spanish, with the ability to articulate complex regulatory requirements clearly and persuasively to both internal teams and external regulators.
• Ability to work autonomously, prioritize effectively under pressure, and thrive in a fast-paced, highly regulated banking environment.

Nice to Have

• Change Management & Process Optimization: Ability to design and implement new workflows to move the organization away from 'emergency demands' toward a sustainable cadence.
• Strategic Vendor Relations: Skill in 'sensitizing' external partners to regulatory needs to ensure they provide the correct assistance from the start.
• Knowledge Management: Proficiency in setting up and maintaining document filing systems or repositories to eliminate information fragmentation.
• Technical/Legal Translation Oversight: While they don't need to be a translator, they should have the ability to manage the localization of complex technical and legal documentation into Spanish effectively.
• Negotiation & Influence: The ability to push back on unrealistic internal timelines and align different departments (Legal, Procurement, IT) toward a unified goal.

Benefits & Compensation

• 17 days paid vacation per year
• Life insurance
• Health insurance
• NuLanguage Program
• NuCare Program
• Extended Parental Leave

Work Mode

Hybrid role based in Mexico City. Starting in July 2026, employees will attend the office 2 days per week, increasing to 3 days per week by January 2027. Interviewing and onboarding are currently virtual. Employees will have employment contracts based on cities where Nu’s offices are located, considering country of hire.