[Hiring] Information Security Specialist @Grupo QuintoAndar

Role Description

At QuintoAndar, identity is our primary security perimeter. We are looking for a Sr. IAM Governance Analyst to evolve our access governance from a traditional, manual model to a "Continuous Compliance" ecosystem.

You won't be a traditional auditor focused merely on checking spreadsheet boxes. Your role will be strategic:

• Designing access models (RBAC/ABAC)
• Defining Segregation of Duties (SoD) matrices
• Bridging the gap with our IAM Engineering team to transform security policies into automated controls (Paved Roads) using platforms like Okta

Your Responsibilities:

• Control & RBAC Design: Lead the modeling and standardization of Role-Based Access Control (RBAC) profiles and Segregation of Duties (SoD) for critical systems and infrastructure.
• Lifecycle Management (JML): Design the business rules for Joiner, Mover, and Leaver (JML) processes, ensuring the principle of least privilege without creating operational bottlenecks.
• Compliance Automation (UAR): Orchestrate User Access Review (UAR) campaigns. Work closely with engineering to parameterize Okta and IAM Ecosystem, reducing friction and operational overhead for business managers.
• Strategic Bridge: Act as the primary translator between Audit/GRC areas (SOX, LGPD, NIST) and technical Engineering squads (IAM/InfraSec), converting legal/regulatory requirements into actionable engineering user stories.
• Continuous Auditing: Map residual risks in the identity ecosystem, develop actionable KPIs/KRIs, and proactively work with business units to mitigate orphaned accounts and over-provisioning.
• Security Awareness & UX: Ensure IAM policies not only protect the company but also offer a seamless user experience for employees, adding friction only where strictly necessary.

Qualifications

• Solid, hands-on experience with IAM Governance principles: RBAC, ABAC, SoD, Least Privilege, and JML workflows.
• Direct experience with the governance and parameterization of IGA and CIAM/Workforce platforms, such as SailPoint IdentityNow, Okta, CyberArk or others.
• Engineering/Product mindset: The ability to look at manual governance processes and propose scalable, automated solutions.
• Experience acting as the interface between business teams, external auditors, and software/security engineering teams.
• Applied knowledge of security and compliance frameworks (NIST CSF, SOX, ISO 27001, LGPD/GDPR) specifically within the context of identity.
• Strong analytical skills to cross-reference databases, identify access anomalies, and generate actionable metrics.
• Exceptional and adaptable communication skills—you must be able to explain an SoD risk to an auditor and immediately pivot to discuss implementation feasibility with a developer.
• Fluency in Portuguese and advanced knowledge of English.

Requirements

• Relevant certifications in Security, Identity, or Governance (e.g., CISA, CISM, CIAM, CRISC).
• Experience with agile methodologies and startup environments.
• Experience or exposure to compliance and security audit areas.

Benefits

• Competitive salary
• Profit sharing
• Meal allowance
• Health insurance
• Dental plan
• Life insurance
• Childcare subsidy and Atypical Parenthood subsidy
• Wellhub
• Home office allowance
• Employee assistance program (mental health, social, legal, and financial support)
• Extended parental leave
• Day off on birthday, Mother’s Day, and Father’s Day
• Benefits Club (discounts on everyday services)
• Discounts at educational institutions
• Reading kit for children – PlayKids