Senior Cybersecurity & GRC Lead

Lennar; Irving (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Paid parental leave

Education assistance

Adoption assistance

Vacation & PTO

Home purchase discounts

Referral bonus

Everyone’s Included Day

Job summary

Lennar is seeking a Lead Security Analyst to oversee all cybersecurity activities for GRC, driving strategic direction and ensuring protection against threats. The leader will guide the team, develop the GRC program, and advise executives on risk and mitigation strategies.

Regular in-person presence is required; candidates should bring 7+ years in cybersecurity, strong leadership, and advanced certifications such as CISSP, CISM, or CRISC.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• 7+ years in cybersecurity with leadership, vulnerability mgmt, GRC, and incident response.
• Advanced certifications such as CISSP, CISM, CRISC.
• Experience with regulatory frameworks (PCI, HIPAA, SOX, GDPR) preferred.
• Strong leadership and communication skills.

Responsibilities

• Lead and manage the cybersecurity team from a technical perspective.
• Develop and maintain the GRC framework.
• Advise leadership on security risks and mitigation strategies.
• Foster security awareness across the organization through training.
• Mentor junior cybersecurity team members and provide guidance.
• Review reports from vulnerability assessments and penetration testing.

Skills

Leadership

Vulnerability management

GRC

Incident response

Regulatory knowledge

Communication

CISSP

CISM

CRISC

Education

Bachelor’s degree in Computer Science or Information Security

Master’s degree preferred

Tools

ISO 17799

ITIL

NIST

Job description

Lennar is seeking a Lead Security Analyst to oversee all cybersecurity activities for GRC, driving strategic direction and ensuring protection against threats. The leader will guide the team, develop the GRC program, and advise executives on risk and mitigation strategies.

Regular in-person presence is required; candidates should bring 7+ years in cybersecurity, strong leadership, and advanced certifications such as CISSP, CISM, or CRISC.