Grupo QuintoAndar | Information Security Specialist - IAM

Grupo QuintoAndar; Brazil; Remote; BRL 200,000 - 350,000; Full time

Benefits offered by this job

Profit sharing

Health insurance

Life insurance

Childcare subsidy and Atypical ParentH

Home office allowance

Employee assistance program (mental,社会

Extended parental leave

Day off on birthday, Mother’s Day, and

Benefits Club discounts

Discounts at educational institutions

Job summary

Grupo QuintoAndar is seeking an Information Security Specialist - IAM to advance our Continuous Compliance program. You will shape access models, define SoD matrices, and collaborate with IAM Engineering to automate policies using platforms like Okta and SailPoint.

You will translate regulatory needs (NIST, LGPD, SOX) into actionable engineering user stories, drive lifecycle governance, and implement KPIs to minimize risks in a remote-first Brazil-based environment.

Qualifications

• Solid hands-on IAM governance principles (RBAC, ABAC, SoD, least privilege) with JML workflows.
• Experience parameterizing IAM/IGA platforms and working with security audits.
• Ability to translate regulatory requirements into engineering stories.

Responsibilities

• Lead RBAC/SoD design and model access controls for critical systems.
• Design Joiner/Mover/Leaver business rules ensuring least privilege.
• Coordinate UAR campaigns and automate controls with IAM engineering.
• Bridge Audit/GRC requirements with engineering squads (SOX, LGPD, NIST).
• Map residual risks, define KPIs/KRIs, and reduce orphaned accounts.

Skills

RBAC/ABAC

SoD

Least Privilege

JML workflows

Security governance

English and Portuguese

Auditing liaison

Tools

SailPoint IdentityNow

Okta

CyberArk

Job description

Grupo QuintoAndar | Information Security Specialist - IAM

About Grupo QuintoAndar

We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.

With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year.

Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance. To learn more about our story, visit: https://grupoquintoandar.com/pt/ .

Location & Remote Work

Our technology team operates under a "remote-first" model, which means we work from home and can live anywhere in Brazil. We also offer the option of working from our São Paulo offices or partner coworking spaces, up to twice a week.

About the Team

The IAM team is at the core of QuintoAndar's platform security. We build and maintain the systems that guarantee the right people and the right services have access to the right resources at the right time. We handle millions of authentication requests daily, and our services are the foundation of trust for the entire QuintoAndar ecosystem.

Responsibilities

The Challenge At QuintoAndar, identity is our primary security perimeter. We are looking for a Sr. IAM Governance Analyst to evolve our access governance from a traditional, manual model to a "Continuous Compliance" ecosystem.

You won't be a traditional auditor focused merely on checking spreadsheet boxes. Your role will be strategic: designing access models (RBAC/ABAC), defining Segregation of Duties (SoD) matrices, and bridging the gap with our IAM Engineering team to transform security policies into automated controls (Paved Roads) using platforms like Okta.

Your Responsibilities:

• Control & RBAC Design: Lead the modeling and standardization of Role-Based Access Control (RBAC) profiles and Segregation of Duties (SoD) for critical systems and infrastructure.
• Lifecycle Management (JML): Design the business rules for Joiner, Mover, and Leaver (JML) processes, ensuring the principle of least privilege without creating operational bottlenecks.
• Compliance Automation (UAR): Orchestrate User Access Review (UAR) campaigns. Instead of manual processes, you will work closely with engineering to parameterize Okta and IAM Ecosystem, reducing friction and operational overhead for business managers.
• Strategic Bridge: Act as the primary translator between Audit/GRC areas (SOX, LGPD, NIST) and technical Engineering squads (IAM/InfraSec), converting legal/regulatory requirements into actionable engineering user stories.
• Continuous Auditing: Map residual risks in the identity ecosystem, develop actionable KPIs/KRIs, and proactively work with business units to mitigate orphaned accounts and over-provisioning.
• Security Awareness & UX: Ensure IAM policies not only protect the company but also offer a seamless user experience for employees, adding friction only where strictly necessary.

What We Are Looking For (Requirements):

• Solid, hands‑on experience with IAM Governance principles: RBAC, ABAC, SoD, Least Privilege, and JML workflows.
• Direct experience with the governance and parameterization of IGA and CIAM/Workforce platforms, such as SailPoint IdentityNow, Okta, CyberArk or others.
• Engineering/Product mindset: The ability to look at manual governance processes and propose scalable, automated solutions.
• Experience acting as the interface between business teams, external auditors, and software/security engineering teams.
• Applied knowledge of security and compliance frameworks (NIST CSF, SOX, ISO 27001, LGPD/GDPR) specifically within the context of identity.
• Strong analytical skills to cross‑reference databases, identify access anomalies, and generate actionable metrics.
• Exceptional and adaptable communication skills—you must be able to explain an SoD risk to an auditor and immediately pivot to discuss implementation feasibility with a developer.
• Fluency in Portuguese and advanced knowledge of English.

We will like you even more if you have:

• Relevant certifications in Security, Identity, or Governance (e.g., CISA, CISM, CIAM, CRISC).
• Have experience with agile methodologies and startup environments.
• Have experience or exposure to compliance and security audit areas.

• Profit sharing
• Health insurance
• Life insurance
• Childcare subsidy and Atypical Parenthood subsidy
• Home office allowance
• Employee assistance program (mental health, social, legal, and financial support)
• Extended parental leave
• Day off on birthday, Mother’s Day, and Father’s Day
• Benefits Club (discounts on everyday services)
• Discounts at educational institutions

Diversity & Inclusion at Grupo QuintoAndar

We value diversity and want everyone to feel welcome here, regardless of their age, gender identity, sexual orientation, race, color, ethnicity, origin, disability, religion, or any other characteristic. All our job openings are open to all individuals!

You’ll notice there are some diversity questions in the application form. For affirmative action roles, this information may be used to verify your alignment with the target audience for the opportunity. In such cases, it may be used for elimination purposes. For non‑affirmative action roles, this data will be used anonymously, exclusively to monitor and improve our inclusion practices in the hiring process, and will have no impact on your application.

Privacy and Data Protection

The Grupo QuintoAndar operates in compliance with privacy and data protection laws, including, but not limited to, the Brazilian General Personal Data Protection Law (LGPD) (Law No. 13,709/2018), and ensures the security of your data. To learn more, please access our Privacy Notice for Candidates . For questions or to exercise your rights as a data subject, please contact us through our Service Channel .