Grupo QuintoAndar | Information Security Manager - GRC

📋 Description

• Lead the Information Security GRC function within a Cybersecurity context.
• Define the GRC vision, structure practices, and drive end-to-end strategic initiatives.
• Collaborate with CISO and leadership to enable critical projects securely.
• Translate cyber risks into financial and operational impact using frameworks like FAIR.
• Oversee governance, risk management, and compliance across LGPD, SOX, GDPR.

🎯 Requirements

• 10+ years in Information Security GRC with 5+ years in leadership.
• Proven experience reporting to executives and influencing stakeholders.
• Expertise in NIST CSF 2.0, ISO 27001/27002, CIS Controls, ISO 31000; ITSM a plus.
• Ability to quantify cyber risk and its business impact; KPI/KRI framework experience.
• Experience with TPRM, incident response governance, and SOX ITGC.
• Fluency in Portuguese and advanced English; strong vendor/regulator engagement.

🎁 Benefits

• Competitive salary
• Profit sharing
• Health, dental, life insurance
• Home office allowance and wellbeing programs
• Parental leave and childcare subsidies
• Employee assistance and diversity inclusion initiatives