Itaú Unibanco
The threat surface here is continental. Itaú Unibanco is the largest bank in Latin America, operating across 18 countries with a market value of US$8.6 billion, serving millions of customers through personal banking, corporate banking, asset management, and wealth management - including Itaú Private Bank and the specialized Itaú BBA division. Founded in 1924, the institution celebrated its centennial in 2024, meaning defenders inherit a sprawling legacy estate alongside aggressively expanding digital platforms, AI-driven decisioning, and advanced analytics layers that now touch core banking operations. The security challenge compounds at scale: Brazil-based primary operations with satellite presence in Miami and Zurich, spanning multiple regulatory regimes and threat actor ecosystems. The bank's stated purpose is enterprise-wide transformation, embedding intelligent, data-driven insights into core decisions - which means the attack surface is moving as fast as the tech stack. AI integration isn't theoretical here; it's being wired into the infrastructure that handles real money at real volume across the Americas. Technical domains touching the security perimeter include artificial intelligence, advanced analytics, and digital platforms - each introducing distinct threat models around model integrity, data pipeline poisoning, API exposure, and session management at scale. For defenders, this is a shop where you're protecting critical financial infrastructure across multiple jurisdictions, working against threat actors ranging from credential-stuffing botnets to sophisticated fraud operations targeting high-net-worth accounts. The operational reality is banking-grade security with fintech-grade velocity, and the legacy-to-modern transition is ongoing.
The threat surface here is continental. Itaú Unibanco is the largest bank in Latin America, operating across 18 countries with a market value of US$8.6 billion, serving millions of customers through personal banking, corporate banking, asset management, and wealth management - including Itaú Private Bank and the specialized Itaú BBA division. Founded in 1924, the institution celebrated its centennial in 2024, meaning defenders inherit a sprawling legacy estate alongside aggressively expanding digital platforms, AI-driven decisioning, and advanced analytics layers that now touch core banking operations.
The security challenge compounds at scale: Brazil-based primary operations with satellite presence in Miami and Zurich, spanning multiple regulatory regimes and threat actor ecosystems. The bank's stated purpose is enterprise-wide transformation, embedding intelligent, data-driven insights into core decisions - which means the attack surface is moving as fast as the tech stack. AI integration isn't theoretical here; it's being wired into the infrastructure that handles real money at real volume across the Americas.
Technical domains touching the security perimeter include artificial intelligence, advanced analytics, and digital platforms - each introducing distinct threat models around model integrity, data pipeline poisoning, API exposure, and session management at scale. For defenders, this is a shop where you're protecting critical financial infrastructure across multiple jurisdictions, working against threat actors ranging from credential-stuffing botnets to sophisticated fraud operations targeting high-net-worth accounts. The operational reality is banking-grade security with fintech-grade velocity, and the legacy-to-modern transition is ongoing.