Information Security Specialist - IAM

Location: Remote-first, anywhere in Brazil; optional work from São Paulo offices or partner coworking spaces up to twice a week.

Company

hirify.global is a Latin American real estate technology ecosystem developing digital products and solutions across the housing journey.

What you will do

• Lead the modeling and standardization of RBAC profiles and Segregation of Duties controls for critical systems and infrastructure.
• Design Joiner, Mover, and Leaver business rules while maintaining least-privilege access.
• Orchestrate User Access Review campaigns and work with engineering to automate governance controls through Okta and the IAM ecosystem.
• Translate SOX, LGPD, and NIST requirements into actionable engineering user stories for IAM and infrastructure security teams.
• Map identity-related residual risks, develop KPIs and KRIs, and mitigate orphaned accounts and over-provisioning with business units.
• Improve IAM policy usability while applying additional access friction only where necessary.

Requirements

• Hands-on experience with IAM Governance principles, including RBAC, ABAC, Segregation of Duties, Least Privilege, and JML workflows.
• Direct experience governing and parameterizing IGA and CIAM or Workforce platforms such as SailPoint IdentityNow, Okta, CyberArk, or equivalent platforms.
• Engineering and product mindset, with the ability to turn manual governance processes into scalable, automated solutions.
• Experience acting as an interface between business teams, external auditors, and software or security engineering teams.
• Applied knowledge of NIST CSF, SOX, ISO 27001, and LGPD/GDPR in identity contexts.
• Strong analytical skills for cross-referencing databases, identifying access anomalies, and generating actionable metrics.
• Exceptional, adaptable communication skills for explaining SoD risks to auditors and discussing implementation feasibility with developers.
• Fluency in Portuguese and advanced English.

Nice to have

• Security, Identity, or Governance certifications such as CISA, CISM, CIAM, or CRISC.
• Experience with agile methodologies and startup environments.
• Experience or exposure to compliance and security audit areas.

Culture & Benefits

• Remote-first technology organization with home-office and coworking options.
• Competitive salary, profit sharing, meal allowance, home-office allowance, and Benefits Club discounts.
• Health, dental, and life insurance, Wellhub, and an employee assistance program covering mental, social, legal, and financial support.
• Childcare and atypical parenthood subsidies, extended parental leave, and additional birthday, Mother’s Day, and Father’s Day days off.
• Educational institution discounts and a reading kit for children.
• Inclusive workplace open to all individuals and focused on diversity and belonging.

Hiring process

• The process starts with the application.
• Applications are reviewed individually and feedback is provided to candidates.
• All hiring communication is conducted by email.