Senior IAM Governance Analyst

About Grupo QuintoAndar

We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.

With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year.

Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance. To learn more about our story, visit: https://grupoquintoandar.com/pt/.


Location & Remote Work 

Our technology team operates under a "remote-first" model, which means we work from home and can live anywhere in Brazil. We also offer the option of working from our São Paulo offices or partner coworking spaces, up to twice a week.


About the Team

The IAM team is at the core of QuintoAndar's platform security. We build and maintain the systems that guarantee the right people and the right services have access to the right resources at the right time. We handle millions of authentication requests daily, and our services are the foundation of trust for the entire QuintoAndar ecosystem.


Responsibilities

The Challenge At QuintoAndar, identity is our primary security perimeter. We are looking for a Sr. IAM Governance Analyst to evolve our access governance from a traditional, manual model to a "Continuous Compliance" ecosystem.

You won't be a traditional auditor focused merely on checking spreadsheet boxes. Your role will be strategic: designing access models (RBAC/ABAC), defining Segregation of Duties (SoD) matrices, and bridging the gap with our IAM Engineering team to transform security policies into automated controls (Paved Roads) using platforms like Okta.

Your Responsibilities:

• Control & RBAC Design: Lead the modeling and standardization of Role-Based Access Control (RBAC) profiles and Segregation of Duties (SoD) for critical systems and infrastructure.
• Lifecycle Management (JML): Design the business rules for Joiner, Mover, and Leaver (JML) processes, ensuring the principle of least privilege without creating operational bottlenecks.
• Compliance Automation (UAR): Orchestrate User Access Review (UAR) campaigns. Instead of manual processes, you will work closely with engineering to parameterize Okta and IAM Ecosystem, reducing friction and operational overhead for business managers.
• Strategic Bridge: Act as the primary translator between Audit/GRC areas (SOX, LGPD, NIST) and technical Engineering squads (IAM/InfraSec), converting legal/regulatory requirements into actionable engineering user stories.
• Continuous Auditing: Map residual risks in the identity ecosystem, develop actionable KPIs/KRIs, and proactively work with business units to mitigate orphaned accounts and over-provisioning.
• Security Awareness & UX: Ensure IAM policies not only protect the company but also offer a seamless user experience for employees, adding friction only where strictly necessary.

What We Are Looking For (Requirements):

• Solid, hands-on experience with IAM Governance principles: RBAC, ABAC, SoD, Least Privilege, and JML workflows.
• Direct experience with the governance and parameterization of IGA and CIAM/Workforce platforms, such as SailPoint IdentityNow, Okta, CyberArk or others.
• Engineering/Product mindset: The ability to look at manual governance processes and propose scalable, automated solutions.
• Experience acting as the interface between business teams, external auditors, and software/security engineering teams.
• Applied knowledge of security and compliance frameworks (NIST CSF, SOX, ISO 27001, LGPD/GDPR) specifically within the context of identity.
• Strong analytical skills to cross-reference databases, identify access anomalies, and generate actionable metrics.
• Exceptional and adaptable communication skills—you must be able to explain an SoD risk to an auditor and immediately pivot to discuss implementation feasibility with a developer.
• Fluency in Portuguese and advanced knowledge of English.

We will like you even more if you have:

• Relevant certifications in Security, Identity, or Governance (e.g., CISA, CISM, CIAM, CRISC).
• Have experience with agile methodologies and startup environments.
• Have experience or exposure to compliance and security audit areas.

Important

Our hiring process starts with the application! If you truly want to be part of our team, please complete this step of the process. We analyze all candidates individually and provide feedback to all applicants. All communication will be conducted via email, so please stay tuned for our messages and release the domain @quintoandar.com.br to ensure our emails are not sent to spam.

Benefits

• Competitive salary
• Profit sharing
• Meal allowance 
• Health insurance
• Dental plan
• Life insurance
• Childcare subsidy and Atypical Parenthood subsidy
• Wellhub
• Home office allowance
• Employee assistance program (mental health, social, legal, and financial support)
• Extended parental leave
• Day off on birthday, Mother’s Day, and Father’s Day
• Benefits Club (discounts on everyday services)
• Discounts at educational institutions
• Reading kit for children – PlayKids
  
  

Diversity & Inclusion at Grupo QuintoAndar

We value diversity and want everyone to feel welcome here, regardless of their age, gender identity, sexual orientation, race, color, ethnicity, origin, disability, religion, or any other characteristic. All our job openings are open to all individuals!

You'll notice there are some diversity questions in the application form. For affirmative action roles, this information may be used to verify your alignment with the target audience for the opportunity. In such cases, it may be used for elimination purposes. For non-affirmative action roles, this data will be used anonymously, exclusively to monitor and improve our inclusion practices in the hiring process, and will have no impact on your application.

Privacy and Data Protection

The Grupo QuintoAndar operates in compliance with privacy and data protection laws, including, but not limited to, the Brazilian General Personal Data Protection Law (LGPD) (Law No. 13,709/2018), and ensures the security of your data. To learn more, please access our Privacy Notice for Candidates. For questions or to exercise your rights as a data subject, please contact us through our Service Channel.

#LI-CO2