Security Program Manager: Enterprise GRC & Audit Lead

Lennar; Miami (FL); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Paid parental leave

Education assistance

Adoption assistance

Vacation & holidays

Job summary

Lennar is seeking a Security Program Manager to lead the enterprise assurance program within the Resilience and Security Services organization. You will manage multiple workstreams, coordinate audit and regulatory responses, and maintain the policy and evidence lifecycle across the control owners in LTG.

Your role includes partnering with auditors and regulators, guiding policy reviews, and driving continuous improvement to ensure timely, compliant deliverables aligned with NIST CSF controls.

Qualifications

• 7+ years of IT project/program management, audit, risk, compliance, or governance.
• Experience with Agile (Scrum, XP), Waterfall/Predictive, and hybrid methodologies; PMP certification preferred.
• Exceptional written and verbal communication with ability to briefing executives.

Responsibilities

• Lead the enterprise assurance program as a structured, multi-workstream initiative.
• Build and maintain the year-long assurance calendar and evidence library.
• Serve as Lennar's liaison to internal and external audit teams and regulatory bodies.
• Collaborate with control owners and policy teams to ensure policy and evidence currency.

Skills

Program management

Audit & regulatory engagements

NIST CSF / frameworks

Agile & hybrid

Policy governance

PMP / certifications

Executive communication

Education

Bachelor's degree

Master's degree preferred

Tools

AuditBoard

SharePoint

Job description

Lennar is seeking a Security Program Manager to lead the enterprise assurance program within the Resilience and Security Services organization. You will manage multiple workstreams, coordinate audit and regulatory responses, and maintain the policy and evidence lifecycle across the control owners in LTG.

Your role includes partnering with auditors and regulators, guiding policy reviews, and driving continuous improvement to ensure timely, compliant deliverables aligned with NIST CSF controls.