Enterprise GRC & Security Program Manager

Lennar; Irving (TX); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Job summary

Lennar is seeking a Security Program Manager to lead the enterprise assurance program, align evidence and policy with NIST CSF controls, and serve as the trusted liaison for audits and regulatory inquiries. You will manage cross-functional workstreams, drive policy lifecycle, and ensure timely, compliant audit responses.

The role partners with GRC, Privacy, and LTG control owners, leveraging tools like AuditBoard and SharePoint to maintain a single source of truth.

Qualifications

• Bachelor’s degree in a related field required; Master’s preferred.
• 5+ years leading multi-workstream programs in IT, audit, risk or governance.
• Experience coordinating audits and regulatory inquiries with strong communication.

Responsibilities

• Lead enterprise assurance program across multiple workstreams with disciplined PM practices.
• Build and manage the annual assurance calendar aligned to policy reviews and audits.
• Own policy library lifecycle and ensure clarity, completeness and fidelity to controls.
• Design process flow for policy drafts, reviews, and final sign-off authority.
• Maintain evidence library and refresh expiring items within the year.
• Serve as primary liaison to internal/external audit teams and regulators.
• Collaborate with control owners to optimize policy work and audits.
• Evaluate systems of record for policy/evidence libraries (SharePoint, AuditBoard).
• Identify security/compliance risks from policy gaps and control weaknesses.
• Communicate status and risks to VP/SVP-level stakeholders with concise formats.
• Mentor team members and guide potential Security Analyst role.

Skills

Program management

GRC & Compliance

NIST CSF knowledge

Audit coordination

Education

Bachelor’s degree in Business / Information Systems / Risk Management

Master’s degree preferred

Tools

AuditBoard

SharePoint

Job description

Lennar is seeking a Security Program Manager to lead the enterprise assurance program, align evidence and policy with NIST CSF controls, and serve as the trusted liaison for audits and regulatory inquiries. You will manage cross-functional workstreams, drive policy lifecycle, and ensure timely, compliant audit responses.

The role partners with GRC, Privacy, and LTG control owners, leveraging tools like AuditBoard and SharePoint to maintain a single source of truth.