Security Program Manager

Jobtailor; Town of Florida (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

Lennar is seeking a senior leader to own and manage the enterprise assurance program across multiple workstreams. You will build a year-long calendar for evidence gathering, policy reviews, and audit responses, and maintain the policy library with annual review cycles.

You will act as the primary liaison to audit teams and regulatory bodies, lead responses to requests, and mentor contributors while driving process improvements and risk mitigation for IT controls.

Qualifications

• 7+ years in IT project/program management, audit, risk, compliance, or governance.
• 5+ years leading multi-workstream projects or programs.
• Experience with Agile, Waterfall, and hybrid methodologies.
• PMP certification preferred.
• Detail-oriented and highly organized with time-sensitive deliverables.
• Experience interacting with audit teams.
• Knowledge of NIST CSF and 800-53 or similar controls.
• Experience with SOC, PCI, FFIEC compliance is a plus.
• Cybersecurity auditing insight is a plus.
• Experience with AuditBoard and SharePoint preferred.
• Strong written and verbal communication; ability to briefing at VP/SVP level.
• Bachelor’s degree; Master’s preferred; additional certifications are a plus.

Responsibilities

• Lead and manage the enterprise assurance program across multiple workstreams.
• Build and maintain a year-long assurance calendar for evidence gathering, policy reviews, and audit responses.
• Own and maintain the enterprise policy library and annual policy review lifecycle.
• Design and maintain the policy review and approval process.
• Own the evidence library and ensure evidence is catalogued and refreshed before expiration.
• Serve as liaison to internal and external audit teams and regulatory bodies.
• Lead responses to audit and regulatory evidence requests.
• Partner with control and policy owners across Lennar IT.
• Lead evaluation and selection of systems of record for policy and evidence libraries (SharePoint, AuditBoard).
• Identify and assess security and compliance risks related to policy gaps and stale evidence.
• Communicate program status and risks to stakeholders and VP/SVP leadership.
• Mentor program contributors and drive process improvements.
• Maintain the assurance program source of truth in management platforms.
• Define program requirements, manage milestones, budgets, and publish progress reports.

Skills

Enterprise governance

Audit & compliance

Project management

Regulatory awareness

Stakeholder communication

Education

Bachelor’s degree in Business/Info Systems or related

Master’s degree preferred

Tools

AuditBoard

SharePoint

Management Platforms

Job description

• Lead and manage the enterprise assurance program across multiple workstreams
• Build and maintain the year-long assurance calendar for evidence gathering, policy reviews, and audit responses
• Own and maintain the enterprise policy library and annual policy review lifecycle
• Design and maintain the policy review and approval process
• Own the evidence library, ensuring evidence is catalogued, retrievable, and refreshed before expiration
• Serve as primary liaison to internal and external audit teams and regulatory bodies
• Lead responses to audit and regulatory evidence requests
• Partner with control and policy owners across Lennar IT
• Lead evaluation and selection of systems of record for policy and evidence libraries, including SharePoint and AuditBoard
• Identify and assess security and compliance risks related to policy gaps, control weaknesses, and stale evidence
• Communicate program status, risks, and issues to stakeholders and VP/SVP-level leadership
• Mentor and guide program contributors
• Analyze assurance trend data and institutionalize process improvements
• Maintain the assurance program source of truth in management platforms
• Define program requirements, manage milestones, form working teams, establish budgets where applicable, track progress, resolve problems, and publish progress reports

Requirements

• 7+ years of professional experience spanning IT project/program management, audit, risk, compliance, or governance
• At least 5 years leading multi-workstream projects or programs
• Experience with Agile (Scrum, XP), Waterfall/Predictive, and hybrid methodologies
• PMP certification preferred
• Extremely detail-oriented and highly organized, able to manage concurrent time-sensitive deliverables
• Experience interacting with internal or external audit teams
• Ability to interpret policy intent and translate it into practical guidance for control owners
• Working knowledge of the NIST Cybersecurity Framework (CSF) and NIST SP 800-53 control families, or a comparable enterprise control framework
• Familiarity with SOC, PCI, and FFIEC compliance requirements is a strong plus
• Cybersecurity and IT auditing insight, including security risk and vulnerability identification, is a major plus
• Experience selecting, implementing, or administering security and document management platforms
• Direct experience with AuditBoard and SharePoint preferred
• Exceptional written and verbal communication skills
• Ability to brief VP/SVP-level stakeholders on status, risk, and trade-offs
• Strong organizational and time management skills
• Bachelor’s degree in Business, Information Systems, Risk Management, or a related field; equivalent experience accepted
• Master’s degree preferred
• Certifications a plus: PMP, CISA, CRISC, CIA, CGEIT, CISSP, or equivalent
• Regular, in-person attendance at the Lennar office during regular work hours
• Ability to operate computer equipment and perform required sedentary office activities, including lifting and carrying up to 25 lbs

Core Competencies

Demonstrates expertise in leading enterprise assurance programs, managing multi-workstream projects, and ensuring compliance with regulatory standards. Proficient in risk assessment, policy management, and stakeholder communication at executive levels.

Highest-signal resume keywords

• Enterprise Assurance Program Management
• Audit and Compliance Experience
• Agile and Waterfall Methodologies
• NIST Cybersecurity Framework Knowledge
• PMP Certification

ATS Optimization Keywords

Hard Skills

• IT Project Management
• Risk Management
• Policy Review and Approval Process
• Evidence Cataloging
• Security Risk Identification
• Document Management Platforms
• Audit Responses
• Data Analysis
• Process Improvement
• Stakeholder Communication

Soft Skills

• Detail-Oriented
• Highly Organized
• Exceptional Communication Skills
• Time Management
• Mentoring and Guidance

Certifications & Qualifications

• PMP
• CISA
• CRISC
• CIA
• CGEIT
• CISSP

Industry Keywords

• NIST SP 800-53
• SOC Compliance
• PCI Compliance
• FFIEC Compliance
• Cybersecurity Auditing

Tools & Technologies

• AuditBoard
• SharePoint
• Management Platforms