G

Grupo QuintoAndar

Real estate marketplace and housing platform

Non-Financial Risk Specialist

Risk ManagementConfirmed live in the last 24 hours
Full-timeSão Paulo, State of São Paulo, BrazilNo salary listed

About the Job

Requirements

  • A university degree in Business Administration, Economics, Accounting, Engineering, Law, Technology, or a related field.
  • Relevant experience in one or more of Enterprise Risk Management, operational risk, internal controls, internal audit, compliance, or risk consulting.
  • Experience building, implementing, or reviewing risk-management methodologies.
  • Experience conducting risk assessments, Risk and Control Self-Assessments (RCSA), building risk maps, and monitoring action plans.
  • Knowledge of frameworks such as COSO ERM and ISO 31000.
  • Experience building governance models, indicators, and executive reports.
  • Ability to analyze end-to-end processes and identify causes, impacts, controls, and interdependencies.
  • Experience leading projects or initiatives involving different departments and stakeholders.
  • Advanced Excel or Google Sheets skills.
  • Experience with risk-management, governance, risk and compliance (GRC), or data-visualization tools.
  • Intermediate or advanced English for reading technical materials and interacting in corporate environments.

Responsibilities

  • Structure and implement the company’s non-financial risk methodology and governance model.
  • Develop and maintain the corporate risk taxonomy, promoting consistency across departments and existing methodologies.
  • Define the implementation roadmap for the non-financial risk agenda, prioritizing relevant exposures, critical areas, and pilot initiatives.
  • Structure and conduct risk identification and assessment processes, including RCSA.
  • Develop criteria, scales, and guidance for assessing probability, impact, controls, inherent risk, and residual risk.
  • Support the definition and review of risk appetite, tolerance, and limits related to non-financial risks.
  • Develop key risk indicators, alert triggers, and escalation criteria.
  • Structure the process for capturing, classifying, and analyzing incidents, operational losses, and near misses.
  • Develop risk maps, scenario analyses, impact assessments, and executive reports.
  • Support selection, implementation, and evolution of the GRC tool used to record, monitor, and report risks.
  • Support departments in defining risk responses, including mitigation, acceptance, transfer, or discontinuation of the exposure.
  • Monitor action plans for priority risks and escalate delays or material exposures.
  • Participate in risk assessments for new products, processes, systems, partners, projects, and strategic initiatives.
  • Assess the existence and adequacy of controls reported by departments, challenging assumptions and conclusions when necessary.
  • Coordinate engagement with specialist departments responsible for specific risks, including Information Security, Privacy, Compliance, Legal, Fraud, Business Continuity, and Third-Party Management.
  • Work with Internal Controls to avoid overlapping responsibilities and leverage existing assessments, controls, and evidence.
  • Support the definition and updating of policies, standards, procedures, and guidance related to risk management.
  • Deliver training and awareness activities to strengthen first-line accountability for managing risks.
  • Prepare materials for the Risk Committee, Audit Committee, senior leadership, and other governance forums.
  • Contribute to defining the operating model and future capacity needs of the non-financial risk function.
  • Coordinate assessments across risks involving processes and operations; technology and systems; information security and cyber risks; third parties and suppliers; business continuity and operational resilience; internal and external fraud; people and operational capacity; organizational change; new products, projects, and initiatives; models, data, and automation; reputation; strategy execution; and operational compliance.
  • For risk areas with specialist departments, focus on methodological integration, consolidation of exposures, independent challenge, and corporate reporting.

Desired Qualifications

  • Experience with operational risks in technology companies, financial services, marketplaces, or payment services.
  • Experience implementing or administering GRC tools.
  • Knowledge of methodologies for managing incidents, operational losses, and near misses.
  • Familiarity with third-party, business continuity, technology, information security, or fraud risks.
  • Knowledge of SOX, COSO Internal Control, and the Three Lines Model.
  • Experience defining risk appetite and tolerance for non-financial risks.
  • Knowledge of scenario-analysis methods and operational-resilience assessment.
  • Certifications such as CRMA, CIA, CISA, ISO 31000, CBCP, or similar.
  • Experience implementing Enterprise Risk Management programs.
  • Experience in organizations operating in regulated environments.
  • Experience presenting topics to a Risk Committee, Audit Committee, Board of Directors, or senior leadership.

About the Company

Grupo QuintoAndar

Real estate marketplace and housing platform

Grupo QuintoAndar operates a real estate ecosystem in Latin America, connecting buyers, renters, and property professionals through a network of brands that host millions of listings. Its platforms aggregate property listings and tools to guide users from discovery to signing a lease or purchase, with a large volume of monthly visits. The company differentiates itself with a multi-brand regional footprint and an end-to-end digital ecosystem that combines traditional real estate with online services. Its goal is to help people love where they live by making every step of finding and securing a home simpler.

Company size
1,001-5,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Not listed
Founded
Not listed

Recently Posted Jobs

Explore more opportunities at Grupo QuintoAndar

See more jobs