Values

The ad says“Preferred Certifications: One or more relevant cybersecurity, risk, or audit certifications such as CISSP, CISM, CRISC, CISA, CGEIT, GCCC, GSEC, or GISP are preferred, but not required.”
The ad says“Preferred Certifications: One or more relevant cybersecurity, risk, or audit certifications such as CISSP, CISM, CRISC, CISA, CGEIT, GCCC, GSEC, or GISP are preferred, but not required.”
The ad says“Preferred Certifications: One or more relevant cybersecurity, risk, or audit certifications such as CISSP, CISM, CRISC, CISA, CGEIT, GCCC, GSEC, or GISP are preferred, but not required.”
The ad says“Preferred Certifications: One or more relevant cybersecurity, risk, or audit certifications such as CISSP, CISM, CRISC, CISA, CGEIT, GCCC, GSEC, or GISP are preferred, but not required.”
The ad says“Preferred Certifications: One or more relevant cybersecurity, risk, or audit certifications such as CISSP, CISM, CRISC, CISA, CGEIT, GCCC, GSEC, or GISP are preferred, but not required.”
The ad says“Preferred Certifications: One or more relevant cybersecurity, risk, or audit certifications such as CISSP, CISM, CRISC, CISA, CGEIT, GCCC, GSEC, or GISP are preferred, but not required.”
The ad says“Preferred Certifications: One or more relevant cybersecurity, risk, or audit certifications such as CISSP, CISM, CRISC, CISA, CGEIT, GCCC, GSEC, or GISP are preferred, but not required.”
The ad says“Preferred Certifications: One or more relevant cybersecurity, risk, or audit certifications such as CISSP, CISM, CRISC, CISA, CGEIT, GCCC, GSEC, or GISP are preferred, but not required.”
The ad says“Ideally familiar with one or more regulatory requirements and laws such as, but not limited to, PCI, FFIEC, Sarbanes-Oxley Act (SOX), HIPAA, GDPR, and GLBA. Additionally, experience in one or more: ISO 17799, ITIL and NIST. General understanding of the Factor Analysis of Information Risk (FAIR) methodology.”
The ad says“Ideally familiar with one or more regulatory requirements and laws such as, but not limited to, PCI, FFIEC, Sarbanes-Oxley Act (SOX), HIPAA, GDPR, and GLBA. Additionally, experience in one or more: ISO 17799, ITIL and NIST. General understanding of the Factor Analysis of Information Risk (FAIR) methodology.”
The ad says“Ideally familiar with one or more regulatory requirements and laws such as, but not limited to, PCI, FFIEC, Sarbanes-Oxley Act (SOX), HIPAA, GDPR, and GLBA. Additionally, experience in one or more: ISO 17799, ITIL and NIST. General understanding of the Factor Analysis of Information Risk (FAIR) methodology.”
The ad says“Ideally familiar with one or more regulatory requirements and laws such as, but not limited to, PCI, FFIEC, Sarbanes-Oxley Act (SOX), HIPAA, GDPR, and GLBA. Additionally, experience in one or more: ISO 17799, ITIL and NIST. General understanding of the Factor Analysis of Information Risk (FAIR) methodology.”
The ad says“Ideally familiar with one or more regulatory requirements and laws such as, but not limited to, PCI, FFIEC, Sarbanes-Oxley Act (SOX), HIPAA, GDPR, and GLBA. Additionally, experience in one or more: ISO 17799, ITIL and NIST. General understanding of the Factor Analysis of Information Risk (FAIR) methodology.”
The ad says“Ideally familiar with one or more regulatory requirements and laws such as, but not limited to, PCI, FFIEC, Sarbanes-Oxley Act (SOX), HIPAA, GDPR, and GLBA. Additionally, experience in one or more: ISO 17799, ITIL and NIST. General understanding of the Factor Analysis of Information Risk (FAIR) methodology.”
The ad says“Ideally familiar with one or more regulatory requirements and laws such as, but not limited to, PCI, FFIEC, Sarbanes-Oxley Act (SOX), HIPAA, GDPR, and GLBA. Additionally, experience in one or more: ISO 17799, ITIL and NIST. General understanding of the Factor Analysis of Information Risk (FAIR) methodology.”
The ad says“Ideally familiar with one or more regulatory requirements and laws such as, but not limited to, PCI, FFIEC, Sarbanes-Oxley Act (SOX), HIPAA, GDPR, and GLBA. Additionally, experience in one or more: ISO 17799, ITIL and NIST. General understanding of the Factor Analysis of Information Risk (FAIR) methodology.”
The ad says“Ideally familiar with one or more regulatory requirements and laws such as, but not limited to, PCI, FFIEC, Sarbanes-Oxley Act (SOX), HIPAA, GDPR, and GLBA. Additionally, experience in one or more: ISO 17799, ITIL and NIST. General understanding of the Factor Analysis of Information Risk (FAIR) methodology.”
The ad says“Ideally familiar with one or more regulatory requirements and laws such as, but not limited to, PCI, FFIEC, Sarbanes-Oxley Act (SOX), HIPAA, GDPR, and GLBA. Additionally, experience in one or more: ISO 17799, ITIL and NIST. General understanding of the Factor Analysis of Information Risk (FAIR) methodology.”

Lead Security Analyst

We are Lennar

Lennar is one of the nation's leading homebuilders, dedicated to making an impact and creating an extraordinary experience for their Homeowners, Communities, and Associates by building quality homes and providing exceptional customer service, giving back to the communities in which we work and live in, and fostering a culture of opportunity and growth for our Associates throughout their career. Lennar has been recognized as a Fortune 500® company and consistently ranked among the top homebuilders in the United States.

A Career that Empowers You to Build Your Future

The Lead Security Analyst is a senior leadership position responsible for overseeing all cybersecurity activities of GRC. The Lead Analyst will drive the strategic direction of the cybersecurity program, ensuring the organization is well-protected against current and emerging threats.

Your Responsibilities on the Team

Lead and manage the cybersecurity team from a technical perspective, having input on/leading strategic direction and ensuring the successful execution of all cybersecurity initiatives.
Develop and maintain the GRC framework, ensuring alignment with business objectives and industry standards.
Serve as a subject matter expert on cybersecurity issues, advising leadership on security risks and mitigation strategies.
Foster a culture of security awareness across the organization through training and education initiatives.
Mentor and coach junior cybersecurity team members, providing technical guidance and leadership.
Create and present risk posture discovery and recommendation reports to risk management leadership.
Review technical reports from vulnerability and penetration testing assessments, and results from tabletop exercises.
Monitor plans of action and milestones for risk remediation requirements from internal and external security assessments, vulnerability reports, audit findings and security gaps.
Liaison with technical and business teams related to business continuity and disaster recovery requirements.
Provide strong oversight of third parties, vendors, and business partners to safeguard against undue risk presented by external entities.
Frequently interact with business units to understand their plans, risk posture and tolerance, and how to support their vision and business obligations with security and risk in mind.

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related field; a Master’s degree is preferred.
7+ years of experience in cybersecurity, with a focus on leadership, vulnerability management, GRC, and incident response.
Ideally familiar with one or more regulatory requirements and laws such as, but not limited to, PCI, FFIEC, Sarbanes-Oxley Act (SOX), HIPAA, GDPR, and GLBA. Additionally, experience in one or more: ISO 17799, ITIL and NIST. General understanding of the Factor Analysis of Information Risk (FAIR) methodology.
Strong leadership and management skills, with a proven track record of building and leading effective cybersecurity teams.
Excellent communication and presentation skills, with the ability to influence and engage stakeholders at all levels.

Preferred Certifications: One or more relevant cybersecurity, risk, or audit certifications such as CISSP, CISM, CRISC, CISA, CGEIT, GCCC, GSEC, or GISP are preferred, but not required.

Physical & Office/Site Presence Requirements:

Regular, in-person attendance at the Lennar office during regular work hours is an essential function of this job. This is primarily a sedentary office position which requires the incumbent to have the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move and carry up to 25 lbs. Finger dexterity is necessary.

This description outlines the basic responsibilities and requirements for the position noted. This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities and activities may change at any time with or without notice.

Life at Lennar

At Lennar, we are committed to fostering a supportive and enriching environment for our Associates, offering a comprehensive array of benefits designed to enhance their well-being and professional growth. Our Associates have access to robust health insurance plans, including Medical, Dental, and Vision coverage, ensuring their health needs are well taken care of. Our 401(k) Retirement Plan, complete with a $1 for $1 Company Match up to 5%, helps secure their financial future, while Paid Parental Leave and an Associate Assistance Plan provide essential support during life's critical moments. To further support our Associates, we provide an Education Assistance Program and up to $30,000 in Adoption Assistance, underscoring our commitment to their diverse needs and aspirations. From the moment of hire, they can enjoy up to three weeks of vacation annually, alongside generous Holiday, Sick Leave, and Personal Day policies. Additionally, we offer a New Hire Referral Bonus Program, significant Home Purchase Discounts, and unique opportunities such as the Everyone’s Included Day. At Lennar, we believe in investing in our Associates, empowering them to thrive both personally and professionally. Lennar Associates will have access to these benefits as outlined by Lennar’s policies and applicable plan terms. Visit Lennartotalrewards.com to view our suite of benefits.

Join the fun and follow us on social media to see what's happening at our company, and don't forget to connect with us on Lennar: Overview | LinkedIn<https://www.linkedin.com/company/lennar/> for the latest job opportunities.

Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.

Asks for

Values