Job description

Job Description Lead Cyber Security GRC Analyst We are Lennar Lennar is one of the nation's leading homebuilders, dedicated to making an impact and creating an extraordinary experience for their Homeowners, Communities, and Associates by building quality homes and providing exceptional customer service, giving back to the communities in which we work and live in, and fostering a culture of opportunity and growth for our Associates throughout their career. Lennar has been recognized as a Fortune 500® company and consistently ranked among the top homebuilders in the United States. Join a Company that Empowers you to Build your Future The Lead Security Analyst is a senior leadership position responsible for overseeing all cybersecurity activities of GRC. The Lead Analyst will drive the strategic direction of the cybersecurity program, ensuring the organization is well-protected against current and emerging threats. • A career with purpose. • A career built on making dreams come true. • A career built on building zero defect homes, cost management, and adherence to schedules. Summary The Lead Cyber Security GRC Analyst is a senior-level position responsible for driving the strategic direction and execution of the organization's Governance, Risk, and Compliance (GRC) initiatives. This role combines deep expertise in cybersecurity risk management with strong leadership capabilities to ensure the organization is protected against current and emerging threats. The Lead Analyst will lead GRC efforts, mentor junior team members, and collaborate with internal stakeholders to align security practices with business objectives. Your Responsibilities On The Team • Collaborate with internal teams to identify, assess, and mitigate security risks. • Manage third-party risk assessments and monitor vendor security posture. • Utilize GRC tools to document and track risk management activities. • Analyze complex data sets to identify trends and support decision-making. • Support compliance with internal policies and external regulatory requirements. • Participate in security audits and assessments, and support remediation efforts. • Maintain accurate documentation of risk assessments, treatment plans, and compliance activities. • Drive continuous improvement in GRC processes and tools. • Work closely with IT, Security, Legal, and Business teams to align GRC initiatives with organizational goals. • Lead the cybersecurity team from a technical perspective, guiding strategy and execution. • Develop and maintain the GRC framework, ensuring alignment with business objectives and industry standards. • Serve as a subject matter expert on cybersecurity issues, advising leadership on security risks and mitigation strategies. • Foster a culture of security awareness across the organization through training and education initiatives. • Mentor and coach junior cybersecurity team members, providing technical guidance and leadership. • Create and present risk posture discovery and recommendation reports to risk management leadership. • Review technical reports from vulnerability and penetration testing assessments, and results from tabletop exercises. • Monitor plans of action and milestones for risk remediation requirements from internal and external security assessments. • Liaison with technical and business teams related to business continuity and disaster recovery requirements. • Provide strong oversight of third parties, vendors, and business partners to safeguard reduce risk. • Interact with business units to understand their plans, risk posture and tolerance, and support their vision with security in mind. • Other work items as defined by management. Requirements • Bachelor’s degree in Computer Science, Information Security, or a related field; Master’s degree preferred. • 7+ years of experience in cybersecurity, with a focus on GRC, third party risk management, vulnerability management, audit management, and leadership. • Proven experience in cyber security risk assessment and risk treatment planning. • Strong collaboration skills with internal stakeholders across a complex IT environment. • Experience with third-party risk management using tools such as Security Scorecard and OneTrust. • Proficiency with GRC tools, preferably AuditBoard, ServiceNow, or Archer. • Working knowledge of Microsoft Office applications. • Demonstrated teamwork and collaboration in a complex IT environment. • Strong problem-solving skills and ability to analyze complex data sets with minimal oversight. • Self-starter with the ability to drive risk projects to completion. • Knowledge of vulnerabilities, SaaS applications, Cloud environments, and application security. • Understanding of technical vulnerability management and operating systems. • Familiarity with security testing tools and procedures. • Familiarity with IT service management (ServiceNow preferred). • Experience with project management tools (Jira preferred). • Strong knowledge of cybersecurity tools, techniques, and frameworks. • Excellent analytical, communication, and documentation skills. • Familiarity with regulatory requirements such as PCI-DSS, FFIEC, SOX, HIPAA, GDPR, GLBA, and frameworks like ISO, ITIL, NIST. • General understanding of the Factor Analysis of Information Risk (FAIR) methodology. • Advanced certifications (e.g., CISSP, CISM, CISA, CRISC) required; additional certifications (e.g., CCSP, CGEIT, CEH, GCCC, GSEC) preferred. Physical & Office/Site Presence Requirements Regular, in-person attendance at the Lennar office during regular work hours is an essential function of this job. This is primarily a sedentary office position which requires the incumbent to have the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move and carry up to 25 lbs. Finger dexterity is necessary. Life at Lennar At Lennar, we are committed to fostering a supportive and enriching environment for our Associates, offering a comprehensive array of benefits designed to enhance their well-being and professional growth. Our Associates have access to robust health insurance plans, including Medical, Dental, and Vision coverage, ensuring their health needs are well taken care of. Our 401(k) Retirement Plan, complete with a $1 for $1 Company Match up to 5%, helps secure their financial future, while Paid Parental Leave and an Associate Assistance Plan provide essential support during life's critical moments. To further support our Associates, we provide an Education Assistance Program and up to $30,000 in Adoption Assistance, underscoring our commitment to their diverse needs and aspirations. From the moment of hire, they can enjoy up to three weeks of vacation annually, alongside generous Holiday, Sick Leave, and Personal Day policies. Additionally, we offer a New Hire Referral Bonus Program, significant Home Purchase Discounts, and unique opportunities such as the Everyone’s Included Day. At Lennar, we believe in investing in our Associates, empowering them to thrive both personally and professionally. Lennar Associates will have access to these benefits as outlined by Lennar’s policies and applicable plan terms. Visit Lennartotalrewards.com to view our suite of benefits. Join the fun and follow us on social media to see what's happening at our company, and don't forget to connect with us on Lennar: Overview | LinkedInhttps://www.linkedin.com/company/lennar/> for the latest job opportunities. Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.

Requirements