Grupo QuintoAndar | Information Security Specialist - IAM

Grupo QuintoAndar; United States; Remote; USD 34,000 - 60,000; Full time

Benefits offered by this job

Health insurance

Meal allowance

Home office allowance

Profit sharing

Employee assistance program

Job summary

Grupo QuintoAndar is seeking an Sr. IAM Governance Analyst to advance our access governance into a Continuous Compliance model. You will design RBAC/ABAC frameworks, define SoD matrices, and partner with IAM Engineering to automate controls using platforms like Okta.

The role emphasizes bridging audit/regulatory requirements with engineering, implementing UAR campaigns, and delivering measurable governance KPIs.

Qualifications

• Hands-on IAM governance experience with RBAC/ABAC/SoD and JML workflows.
• Experience governing and parameterizing IGA/CIAM platforms (e.g., SailPoint, Okta, CyberArk).
• Engineering mindset to automate governance and reduce manual work.
• Strong interface skills between business, auditors, and engineering teams.
• Knowledge of NIST CSF, SOX, ISO 27001, LGPD/GDPR in identity contexts.
• Fluency in Portuguese and advanced English.

Responsibilities

• Lead design and standardization of RBAC profiles and SoD matrices for critical systems.
• Define JML business rules ensuring least privilege without bottlenecks.
• Orchestrate UAR campaigns; parametrize Okta/IAM ecosystem to reduce friction for managers.
• Bridge Audit/GRC requirements with IAM/InfraSec to translate rules into engineering stories.
• Map residual risks, create KPIs/KRIs, and mitigate orphaned accounts and over-provisioning.
• Ensure IAM policies balance security with a seamless user experience.

Skills

RBAC

ABAC

SoD

Least Privilege

JML workflows

Security Metrics

Stakeholder Communication

Portuguese fluency

English proficiency

Tools

SailPoint IdentityNow

Okta

CyberArk

Job description

About Grupo QuintoAndar

We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.

With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year.

Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance. To learn more about our story, visit: https://grupoquintoandar.com/pt/ .

Location & Remote Work

Our technology team operates under a "remote-first" model, which means we work from home and can live anywhere in Brazil. We also offer the option of working from our São Paulo offices or partner coworking spaces, up to twice a week.

About the Team

The IAM team is at the core of QuintoAndar's platform security. We build and maintain the systems that guarantee the right people and the right services have access to the right resources at the right time. We handle millions of authentication requests daily, and our services are the foundation of trust for the entire QuintoAndar ecosystem.

Responsibilities

The Challenge At QuintoAndar, identity is our primary security perimeter. We are looking for a Sr. IAM Governance Analyst to evolve our access governance from a traditional, manual model to a "Continuous Compliance" ecosystem.

You won't be a traditional auditor focused merely on checking spreadsheet boxes. Your role will be strategic: designing access models (RBAC/ABAC), defining Segregation of Duties (SoD) matrices, and bridging the gap with our IAM Engineering team to transform security policies into automated controls (Paved Roads) using platforms like Okta.

Your Responsibilities:

• Control & RBAC Design: Lead the modeling and standardization of Role-Based Access Control (RBAC) profiles and Segregation of Duties (SoD) for critical systems and infrastructure.
• Lifecycle Management (JML): Design the business rules for Joiner, Mover, and Leaver (JML) processes, ensuring the principle of least privilege without creating operational bottlenecks.
• Compliance Automation (UAR): Orchestrate User Access Review (UAR) campaigns. Instead of manual processes, you will work closely with engineering to parameterize Okta and IAM Ecosystem, reducing friction and operational overhead for business managers.
• Strategic Bridge: Act as the primary translator between Audit/GRC areas (SOX, LGPD, NIST) and technical Engineering squads (IAM/InfraSec), converting legal/regulatory requirements into actionable engineering user stories.
• Continuous Auditing: Map residual risks in the identity ecosystem, develop actionable KPIs/KRIs, and proactively work with business units to mitigate orphaned accounts and over-provisioning.
• Security Awareness & UX: Ensure IAM policies not only protect the company but also offer a seamless user experience for employees, adding friction only where strictly necessary.

What We Are Looking For (Requirements):

• Solid, hands-on experience with IAM Governance principles: RBAC, ABAC, SoD, Least Privilege, and JML workflows.
• Direct experience with the governance and parameterization of IGA and CIAM/Workforce platforms, such as SailPoint IdentityNow, Okta, CyberArk or others.
• Engineering/Product mindset: The ability to look at manual governance processes and propose scalable, automated solutions.
• Experience acting as the interface between business teams, external auditors, and software/security engineering teams.
• Applied knowledge of security and compliance frameworks (NIST CSF, SOX, ISO 27001, LGPD/GDPR) specifically within the context of identity.
• Strong analytical skills to cross-reference databases, identify access anomalies, and generate actionable metrics.
• Exceptional and adaptable communication skills—you must be able to explain an SoD risk to an auditor and immediately pivot to discuss implementation feasibility with a developer.
• Fluency in Portuguese and advanced knowledge of English.

We will like you even more if you have:

• Relevant certifications in Security, Identity, or Governance (e.g., CISA, CISM, CIAM, CRISC).
• Have experience with agile methodologies and startup environments.
• Have experience or exposure to compliance and security audit areas.

Benefits

• Competitive salary
• Profit sharing
• Meal allowance
• Health insurance
• Dental plan
• Life insurance
• Childcare subsidy and Atypical Parenthood subsidy
• Wellhub
• Home office allowance
• Employee assistance program (mental health, social, legal, and financial support)
• Extended parental leave
• Day off on birthday, Mother’s Day, and Father’s Day
• Benefits Club (discounts on everyday services)
• Discounts at educational institutions
• Reading kit for children – PlayKids

Diversity & Inclusion at Grupo QuintoAndar

We value diversity and want everyone to feel welcome here, regardless of their age, gender identity, sexual orientation, race, color, ethnicity, origin, disability, religion, or any other characteristic. All our job openings are open to all individuals!

You’ll notice there are some diversity questions in the application form. For affirmative action roles, this information may be used to verify your alignment with the target audience for the opportunity. In such cases, it may be used for elimination purposes. For non-affirmative action roles, this data will be used anonymously, exclusively to monitor and improve our inclusion practices in the hiring process, and will have no impact on your application.

Privacy and Data Protection

The Grupo QuintoAndar operates in compliance with privacy and data protection laws, including, but not limited to, the Brazilian General Personal Data Protection Law (LGPD) (Law No. 13,709/2018), and ensures the security of your data. To learn more, please access our Privacy Notice for Candidates . For questions or to exercise your rights as a data subject, please contact us through our Service Channel .

#LI-CO2