Grupo QuintoAndar | Information Security Manager - GRC

p strong About Grupo QuintoAndar /strong /p p We are Grupo QuintoAndar, the largest real estate ecosystem in Latin America. Guided by a shared purpose of helping people love where they live, we have a diversified portfolio of brands and solutions across different countries in Latin America, covering all phases of the housing journey. We also have a Technology Hub in Portugal. We develop technology and innovation to transform and enhance the overall living experience. /p p With the support of a world-class team of investors and advisors, including Kaszek, Qualcomm, General Atlantic, and SoftBank, Grupo QuintoAndar is currently valued at over USD 5.1 billion and continues to grow year over year. /p p Here, you will work with top professionals in the market, in an environment that breathes innovation, collaboration, and high performance. To learn more about our story, visit: a href= https://grupoquintoandar.com/pt/ /a a href= https://grupoquintoandar.com/pt/ https://grupoquintoandar.com/pt/ /a . /p p strong br Location amp; Remote Work nbsp; /strong /p p Our technology team operates under a remote-first model, which means we work from home and can live anywhere in Brazil. We also offer the option of working from our São Paulo offices or partner coworking spaces, up to twice a week. /p p nbsp; /p p strong About the Position /strong /p p We are looking for a leader to take on the role of Manager of Information Security, GRC. Your mission will be to define the area's vision, structure our practices, and lead the transformation: shifting the perception that GRC is merely an operational and bureaucratic function to making it a dynamic, strategic enabler focused on real business risk. /p p This is not a position for managing spreadsheets. As the GRC leader within the Cybersecurity structure, you will work side-by-side with the CISO and others leadership to safely enable critical projects. We seek someone with technical capability, execution skills, and strategic vision, able to drive projects end-to-end and ensure that security governance makes our business faster, more scalable, and resilient. /p p You must have proven experience in GRC leadership that goes beyond regulatory compliance and paper-based frameworks, understanding control architectures and the technological nuances of an agile, cloud-native environment (Cloud, AI, Data). You will be primarily responsible for accountability regarding cyber risk, guiding the company through complex scenarios. /p p The Manager of GRC will report directly to the CISO and will be responsible for managing the investment, the internal team, and the third-party (3P) partners supporting the GRC operation. /p p nbsp; /p p strong Main Responsibilities /strong /p ul li strong GRC Leadership amp; Strategy: /strong Develop and lead the GRC strategy, building and executing roadmap in full alignment with the company's business objectives, budget, and risk appetite. /li li strong Security Service Channel amp; Portfolio: /strong Own the company's security service channel and security portfolio, acting as the primary intake and coordination point for security requests and initiatives, ensuring visibility and prioritization across the security program. /li li strong Information Security Governance amp; Artificial Intelligence: /strong Lead the Information Security Governance model. Take the lead in AI governance, establishing guidelines, controls, and policies to ensure the safe, ethical, and compliant use of new technologies across the company. /li li strong IAM Governance: /strong Lead IAM Governance projects, ensuring identity and access management controls and processes are aligned with the company's risk and SOX compliance requirements. /li li strong People Management amp; Development (EM): /strong Lead, inspire, and develop a high-performance team of GRC specialists, promoting engagement, autonomy, and technical excellence. /li li strong Operationalized Risk Management: /strong Lead the