Grupo QuintoAndar | Information Security Specialist - IAM

The role

You will evolve access governance from a manual model to a Continuous Compliance ecosystem. You will design access models, define Segregation of Duties matrices, and bridge the gap between Audit/GRC areas and technical Engineering squads.

What you will do

• Lead the modeling and standardization of Role-Based Access Control (RBAC) profiles and Segregation of Duties (SoD)
• Design business rules for Joiner, Mover, and Leaver (JML) processes
• Orchestrate User Access Review (UAR) campaigns by working with engineering to parameterize Okta and IAM Ecosystem
• Act as the primary translator between Audit/GRC areas and technical Engineering squads
• Map residual risks in the identity ecosystem and develop actionable KPIs/KRIs
• Work with business units to mitigate orphaned accounts and over-provisioning
• Ensure IAM policies offer a seamless user experience for employees

Required qualifications

• Solid, hands-on experience with IAM Governance principles: RBAC, ABAC, SoD, Least Privilege, and JML workflows
• Direct experience with the governance and parameterization of IGA and CIAM/Workforce platforms, such as SailPoint IdentityNow, Okta, CyberArk or others
• Engineering/Product mindset
• Experience acting as the interface between business teams, external auditors, and software/security engineering teams
• Applied knowledge of security and compliance frameworks (NIST CSF, SOX, ISO 27001, LGPD/GDPR) specifically within the context of identity
• Strong analytical skills to cross-reference databases, identify access anomalies, and generate actionable metrics
• Exceptional and adaptable communication skills
• Fluency in Portuguese
• Advanced knowledge of English

Nice to have

• Relevant certifications in Security, Identity, or Governance (e.g., CISA, CISM, CIAM, CRISC)
• Experience with agile methodologies and startup environments
• Experience or exposure to compliance and security audit areas

Benefits

• Competitive salary
• Profit sharing
• Meal allowance
• Health insurance
• Dental plan
• Life insurance
• Childcare subsidy and Atypical Parenthood subsidy
• Wellhub
• Home office allowance
• Employee assistance program (mental health, social, legal, and financial support)
• Extended parental leave
• Day off on birthday, Mother’s Day, and Father’s Day

Before you apply

• Complete the application step
• Release the domain @quintoandar.com.br to ensure emails are not sent to spam

About the company

Grupo QuintoAndar is the largest real estate ecosystem in Latin America. It has a diversified portfolio of brands and solutions across different countries in Latin America.