Sox Specialist
Nubank is hiring a Sox Specialist in São Paulo, Brazil. Level rates it ; you can apply on Nubank.
Level's read on this job
- On Level's scale, this role is Little AI ●○○○: aI is not part of the work.
- Some of the work can be done remotely, according to the posting.
- The posting mentions Gemini, Databricks and Cursor among its tools and skills.
- Nubank has 104 other open roles on Level.
- Posted in the last few days.
AI in this role
Nu serves more than 140 million customers, guided by a mission to fight complexity and empower people. The company has been leading an industry transformation through innovative products and human-centered services.
Proprietary technology and data at scale power Nu’s digital platform, built to promote financial access, advancement, and transparency. Its business model thrives on customer love and lower costs, feeding a flywheel of growth and profitability.
Visit our Institutional Page
About the Role
As a SOX Specialist in Nubank's SOx Internal Controls team, you will own the ICFR cycle for a defined portfolio of processes, from walkthroughs to audit-ready testing. As a second line function, we challenge process and control owners so that management can sign its SOx 302/404 conclusions with confidence.
This role is built on strong accounting and financial statement skills. You should be able to define materiality and scope of accounts by reading the Group's financial statements, and apply GAAP (mainly IFRS) to design controls that prevent material misstatements on a timely basis. Your accounting and disclosure knowledge is what lets you hold deep discussions with Finance specialists and with the external auditors throughout the audit.
You’ll be Responsible for
Owning the ICFR cycle for a defined process portfolio: Risk and Control Matrix (RCM), narratives, walkthroughs, TOD and TOE.
Linking the risks identified in the RCM directly to the financial statement line item (FSLI).
Applying Nu's internal methodology and tying Risk → Assertion → Objective → Control → Evidence.
Determining technologies in scope and deciding when to request SOC reports (ITGC).
Challenging process and control owners, and treating IPE/EUC in design and testing.
Executing TOE according to sampling and RoMM, and independently producing audit-ready workpapers.
Drafting deficiency texts that size impact, magnitude and probability on the financial statements, and tracking remediation with the first line.
Contributing to cross-functional discussions with IT, Finance, first line and external audit counterparts on your scope.
Using low-code automation and AI with a risk lens, never as a substitute for professional skepticism.
Leading a specific pack, process or workstream, sharing what you learn and supporting teammates.
Contributing to cross-functional discussions with IT, first line and external audit counterparts on your scope.
Deal with complex and increasingly ambiguous problems that involve several stakeholders, trade-offs between speed and rigor, and a busy calendar of changes and new geographies, with no predefined path to the solution.
What We're Looking For Someone Who Has
Education: Degree in Accounting, Economics or Business Administration, around 6 years of experience in similar positions.
At least one of following experiences: Big 4 integrated audit; public-company Internal Audit with an annual SOX cycle; 2LoD Internal Controls / SOX office; controllership experience.
Fluent English (written and spoken) to document workpapers and manage stakeholders around the world.
Independence on scoped projects: you close SOX deliverables with light review, not constant supervision.
Deep understanding of accounting principles, mainly IFRS (for example, IFRS 9, IFRS 18), and of financial statement disclosure.
Ability to read the Group's financial statements to define materiality and scope of accounts.
Ability to explain which assertion a control mitigates and how its failure becomes a misstatement.
Working knowledge of COSO 2013 and PCAOB standards, including AS 2201.
Knowledge of AI tools and light-coding programs (Databricks, Cursor, Gemini). Build no-code/low-code AI automations independently and weighs initiatives by ROI, effort and risk.
Work Setup
Location
Sao Paulo, Brazil
Work model
Hybrid
Office requirement
2 days per week at the office.
Our Benefits
Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
Public Transportation Commuting Benefit (Vale-Transporte)
NuCare – Psychological, Financial and Legal Assistance Program
Life Insurance
Medical Plan
Dental Plan
NuLanguage – Language Course Program
Nucleo - Our learning platform of courses
Extended Parental Leave
Daycare Allowance
Parental Consultancy
Work-from-home Allowance
Gym Partnerships
30 days of paid vacation
Relocation Assistance Package, if applicable
Our recruitment process may involve the use of artificial intelligence–enabled tools, such as automated interview transcription and analysis, to support the evaluation process. Artificial intelligence is not used to make final hiring decisions; all decisions are made by human reviewers.
To maintain a consistent and fair process for every candidate, Nu does not provide individualized technical feedback. See how our policy works here
How we rate this
Sox Specialist at Nubank rates 37 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.
Little AI. AI is not part of the work.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Skills and AI tools this role asks for
Questions you could be asked
- What's a project where you used Gemini hands-on?
- Walk me through how you've used Databricks in your day-to-day work.
- What are the limits of Cursor that you've run into, and how did you work around them?
Adapt your resume
- List these exact terms on your resume: Gemini, Databricks, and Cursor. An applicant tracking system matches the wording, not the idea.
- Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
Get your CV reviewed before you apply
Send your CV and the role you want next. Your review arrives by email within 3 days.
Get new remote AI jobs by email
One email a week, each job rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free.
Similar roles
Other roles that involve little AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step