About Grupo QuintoAndar

We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience.

With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year.

Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance. To learn more about our story, visit: https://grupoquintoandar.com/pt/.

Location & Hybrid Work Model

Our team follows a “hybrid” model, requiring in-person attendance at our office located in São Paulo.

Hiring Process Stages

The stages of our hiring processes aim to assess your experiences and allow you to meet our teams and explore career opportunities. They are structured as follows:

• Screening
• People Interview
• Hiring Manager Interview
• Case
• Stakeholder 1
• Stakeholder 2

About the Team

The team acts as the executive leadership's right hand, serving as the company's core for strategic intelligence and governance. The group's focus is to ensure consistency between long-term vision and immediate execution, managing everything from OKR rituals to resource allocation. It is a high-performance team guided by analytical rigor, an ownership mindset, and the ability to translate complex scenarios into practical and sustainable decisions.

Responsabilities

• Strategic Roadmap & Governance: Define long-term growth pillars, strategic frameworks, and governance rituals to guide executive decision-making.

• Integrated Planning & Capital Allocation: Translate the long-term vision into short-term plans, ensuring OKRs and financial planning (Capex/Opex/Headcount) are aligned with the strategy.

• Market Intelligence & M&A: Lead the screening and business case development for mergers and acquisitions, while monitoring core KPIs to identify tactical opportunities or pivots.

• Executive Advisory: Act as a strategic advisor to the executive team, ensuring data-driven decisions and fostering a culture of excellence and analytical rigor across the company.

Requirements

• Experience in Strategic Consulting (MBB or Big 4), Financial Planning (FP&A), or analytical fields;

• Advanced mastery of financial modeling, data analysis, unit economics, and English fluency;

• Ability to engage with and influence stakeholders.

Important

• Our hiring process starts with the application! If you truly want to be part of our team, please complete this step of the process. We analyze all candidates individually and provide feedback to all applicants.

• All communication will be conducted via email, so please stay tuned for our messages and release the domain @quintoandar.com.br to ensure our emails are not sent to spam.

Benefits

• Competitive salary
• Profit sharing
• Variable compensation (For Commercial Positions Only)
• Meal allowance 
• Health insurance
• Dental plan
• Life insurance
• Childcare subsidy and Atypical Parenthood subsidy
• Wellhub
• Home office allowance
• Employee assistance program (mental health, social, legal, and financial support)
• Extended parental leave
• Day off on birthday, Mother’s Day, and Father’s Day
• Benefits Club (discounts on everyday services)
• Discounts at educational institutions
• Reading kit for children – PlayKids
  
  

Diversity & Inclusion at Grupo QuintoAndar

We value diversity and want everyone to feel welcome here, regardless of their age, gender identity, sexual orientation, race, color, ethnicity, origin, disability, religion, or any other characteristic. All our job openings are open to all individuals!

You'll notice there are some diversity questions in the application form. For affirmative action roles, this information may be used to verify your alignment with the target audience for the opportunity. In such cases, it may be used for elimination purposes. For non-affirmative action roles, this data will be used anonymously, exclusively to monitor and improve our inclusion practices in the hiring process, and will have no impact on your application.

Privacy and Data Protection

The Grupo QuintoAndar operates in compliance with privacy and data protection laws, including, but not limited to, the Brazilian General Personal Data Protection Law (LGPD) (Law No. 13,709/2018), and ensures the security of your data. To learn more, please access our Privacy Notice for Candidates. For questions or to exercise your rights as a data subject, please contact us through our Service Channel.

About Us

Nu is one of the largest digital financial platforms in the world, with more than 122 million customers across Brazil, Mexico, and Colombia. Guided by our mission to fight complexity and empower people, we are redefining financial services in Latin America and this is still just the beginning of the purple future we're building.

Listed on the New York Stock Exchange (NYSE: NU), we combine proprietary technology, data intelligence, and an efficient operating model to deliver financial products that are simple, accessible, and human.

Our impact has been recognized by global rankings such as Time 100 Companies, Fast Company’s Most Innovative Companies, and Forbes World’s Best Bank. Visit our institutional page https://international.nubank.com.br/careers/  

About the Role

We are looking for an experienced engineer who thrives on solving "meta-problems"—fixing the tools and processes that other teams rely on. You will be responsible for designing and implementing high-leverage automation, managing enterprise tool rollouts (e.g., Postman, n8n), and defining the technical governance for our next-generation AI workflows.

Key Responsibilities

• Enterprise Automation & Platform Engineering:
  • Lead the implementation and maintenance of automation platforms (e.g., n8n) to orchestrate workflows across business units.
  • Design and optimize critical communication infrastructure (e.g., AWS SES, email delivery resilience) to ensure high availability for internal and transactional messaging.
• AI & "Vibe Coding" Governance:
  • Drive the technical strategy for AI adoption within engineering workflows.
  • Develop governance frameworks to ensure safe, compliant, and effective use of AI coding assistants and agents.
  • Build "Minimum Control Platforms" that balance developer freedom with security and operational risk requirements.
• Internal Tooling Standards:
  • Define and enforce usage standards for developer tools (e.g., Postman for API lifecycle), ensuring consistency across squads.
  • Conduct "Discovery Design" for new internal products, ensuring they are inclusive and scalable across different technical frameworks.
• Cross-Functional Technical Leadership:
  • Act as a technical reference for the domain, influencing architectural decisions beyond the immediate team. Mentor senior engineers and partner with stakeholders (ITSec, Privacy) to align technical solutions with company policies.

What are we looking for?

Technical Skills

• Solid Software Engineering Background: Proficiency in modern programming languages (Clojure, Java, or Python preferred) and distributed systems.

• Infrastructure & Cloud: Strong hands-on experience with AWS (specifically services like SES, Lambda, IAM) and Infrastructure-as-Code (Terraform/CloudFormation).

• Automation Mindset: Experience with workflow automation tools (n8n, Zapier, or custom orchestration engines) and API integration.

• AI/LLM Familiarity: Interest or experience in integrating LLMs/AI agents into developer workflows (e.g., Cursor, Copilot, internal AI agents).

• Advanced English

Behavioral & Strategic Skills

• Governance-Aware: You understand that "efficiency" must be balanced with "security." You can design systems that are safe by default without destroying developer velocity.
• Problem Solver: You are comfortable debugging opaque infrastructure issues (like email deliverability drops) one day and writing a strategic policy document the next.
• Multiplier: You enjoy documenting your work, creating "Golden Paths" for other engineers, and teaching others how to use the tools you build.

Our Benefits

• Chance of earning equity at Nubank
• Food/ Meal Card (Vale-Refeição and/or Vale Alimentação)
• Public Transportation Commuting Benefit (Vale-Transporte)
• NuCare – Psychological, Financial and Legal Assistance Program
• Life Insurance
• Medical Plan
• Dental Plan
• NuLanguage – Language Course Program
• Nucleo - Our learning platform of courses
• Extended Parental Leave
• Daycare Allowance
• Parental Consultancy
• Work-from-home Allowance
• Gym Partnerships
• 30 days of paid vacation
• Relocation Assistance Package, if applicable

Work Model for this Role

Our hybrid work model brings us to the office at least twice a week, on strategic days designed to maximize team connection and collaboration. For more details, visit https://building.nubank.com/nu-hybrid-work-model/

No seu dia a dia, você vai:

• Preparação e Suporte a Auditorias;
• Gestão de Riscos;
• Apoiará na implementação e redesign de estruturas RBAC utilizando SailPoint IdentityNow;
• Participará do role mining para identificação e criação de papéis funcionais otimizados;
• Identificará oportunidades de otimização nos processos de governança IAM;
• Participará de projetos de automação para reduzir trabalho manual em auditorias;
• Colaborará em iniciativas de modernização da plataforma de governança;
• Apoiará implementação de novas funcionalidades e controles no ambiente IAM;
• Gestão de Controles;
• Padronização de Processos;

O que buscamos 

Obrigatórios:

• Experiência: 4+ anos em Governança de Identity and Access Management em squad de governança ou GRC;
• Formação completa;
• Experiência em projetos de implementação e redesign de RBAC (Role-Based Access Control);
• Experiência em gestão de projetos de IAM (implementação, migração ou modernização de plataformas)
• Experiência em Controles Regulatórios.

Benefícios 

• Vale-alimentação e Vale-refeição
• Plano de saúde e odontológico
• Seguro de vida
• DayOff de Aniversário
• Baby On Board e Sala de Amamentação
• Licença parental estendida
• Auxílio-creche/babá e/ou auxílio para filhos com deficiência
• Wellhub e Grupo de Corrida Inter
• Espaço CARE4U (Belo Horizonte): serviços de autocuidado com valores exclusivos, área de descompressão, jogos e minicampo de golfe
• Vantagens no nosso SuperApp, como Duo Gourmet
• Cartão Prime Inter
• Programas de treinamento e capacitação internos

Etapas do Processo Seletivo

• Triagem de currículos;
• Screening (abordagem inicial para alinhamento de expectativas sobre a vaga);
• Assessments;
• Entrevista com Time de Talent; 
• Teste técnico (quando necessário);
• Entrevista com a liderança;
• Proposta de Contratação (Offer);

Sobre a vaga e missão do cargo 

Você fará parte do nosso time de Cybersecurity e atuará diretamente com GRC e IAM, garantindo conformidade, melhoria de processos e gestão de acessos .

No seu dia a dia, você vai: 

• Liderar equipes multidisciplinares
• Promover cultura organizacional
• Gerenciar orçamentos, recursos e fornecedores da área de GRC e IAM
• Comunicar-se efetivamente com stakeholders executivos
• Liderar comitês de segurança e apresentações para as demais lideranças
• Desenvolver, implementar e manter políticas, normas, instruções de trabalho e diretrizes de segurança cibernética
• Implementar, manter e monitorar os controles de conformidade com regulamentações (SOx, SOC 2, PCI DSS, ISO 27001, LGPD etc.)
• Implementar e gerenciar frameworks de governança de segurança da informação (CIS Controls, NIST CSF 2.0, etc)
• Conduzir avaliações de risco de segurança e elaborar planos de mitigação
• Estabelecer metodologias de análise quantitativa e qualitativa de riscos
• Gerenciar auditorias internas/externas e relacionamento com órgãos reguladores
• Conduzir due diligences e de segurança para novos parceiros e aquisições
• Supervisionar programa de avaliação de riscos internos e de fornecedores
• Monitorar e reportar status dos riscos para as demais lideranças
• Manter registro corporativo de riscos e acompanhar planos de ação
• Implementar e administrar soluções corporativas de gestão de identidade e acesso (IAM)
• Automatizar processos de gestão de identidades e controles de acesso
• Conduzir revisões periódicas de controles de segurança
• Participar de comitês executivos e grupos de trabalho de cibersegurança
• Definir KPIs e prover relatórios executivos da área
• Promover cultura de segurança e programas de conscientização
• Implementar soluções de inteligência artificial e RPA para otimização de controles
• Monitorar continuamente a eficácia dos controles e implementar melhorias

O que buscamos 

Obrigatórios:

• Experiência com auditoria interna ou externa, controles internos e/ou SOX. 
• Inglês fluente;
• Formação Superior (Nas áreas de Computação, Administração, Engenharia ou afins com auditoria e gerenciamento de riscos);
• Pós-graduação (Nas áreas de Computação, Administração, Engenharia ou afins com auditoria e gerenciamento de riscos);
• Conhecimento intermediário/avançado em Excel.

Desejáveis:

• Espanhol (intermediário ou superior);
• Experiência prévia em auditoria e gerenciamento de riscos;
• Cursos e/ou treinamentos relacionados a auditoria e gerenciamento de riscos;
• Certificações relacionadas a auditoria e gerenciamento de riscos;

Benefícios 

• Vale-alimentação e Vale-refeição
• Plano de saúde e odontológico
• Seguro de vida
• DayOff de Aniversário
• Baby On Board e Sala de Amamentação
• Licença parental estendida
• Auxílio-creche/babá e/ou auxílio para filhos com deficiência
• Wellhub e Grupo de Corrida Inter
• Espaço CARE4U (Belo Horizonte): serviços de autocuidado com valores exclusivos, área de descompressão, jogos e minicampo de golfe
• Vantagens no nosso SuperApp, como Duo Gourmet
• Cartão Prime Inter
• Programas de treinamento e capacitação internos

Etapas do Processo Seletivo

• Triagem de currículos;
• Screening (abordagem inicial para alinhamento de expectativas sobre a vaga);
• Assessments;
• Entrevista com Time de Talent; 
• Teste técnico (quando necessário);
• Entrevista com a liderança;
• Proposta de Contratação (Offer);