Sr Business Information Security Officer

001 Lennar Mortgage LLC; Tallahassee (FL); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Parental leave

Adoption assistance

Job summary

Lennar Financial Services seeks a Sr. Business Information Security Officer to lead the written information security program and oversee regulatory and investor risk reporting across mortgage operations nationwide.

The role partners with Legal, Compliance, IT, and business units to translate risk into board-ready controls and ensure security leadership for LFS’s programs. Advanced degrees and certifications are preferred for this senior, business-facing role.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science, or Business Administration required.
• 15+ years of progressive experience in information security, IT risk, regulatory compliance, or audit, including at least 5 years in a BISO or senior leadership role.

Responsibilities

• Own and mature the WISP, ensuring legal sufficiency and regulatory alignment.
• Define security standards across origination, servicing, capital markets, and corporate functions.
• Lead annual security program review with risk assessment and remediation roadmap.
• Deliver board and executive risk materials with clear, actionable narratives.
• Own response materials for regulatory exams, audits, and investor reviews.
• Operationalize GLBA, FFIEC, and state privacy laws across LFS operations.

Skills

InfoSec leadership

Regulatory compliance

Board reporting

Risk management

Education

Bachelor's degree in Information Security or related

MBA or MS in Cybersecurity or Risk Management (preferred)

Tools

GRC platforms

SIEM tools

IAM systems

Job description

A Career that Empowers You to Build Your Future The Sr Business Information Security Officer is Lennar Financial Services' senior information security and privacy risk leader, ensuring LFS's security program remains legally sound, defensible, and operationally effective across mortgage operations nationwide. Serving as the primary liaison between Legal, Compliance, the CISO, IT, and the business, this role translates regulatory, contractual, and litigation risk into practical, board-ready security controls. Partnering closely with LFS and enterprise security leadership, the VP owns the Written Information Security Program, leads regulatory and audit engagements, and delivers executive and board-level risk reporting. The role builds trusted, cross-functional partnerships while holding LFS accountable to Lennar's standards of quality, value, and integrity.

Your Responsibilities on the Team

• Own and continuously mature the LFS Written Information Security Program (WISP), supporting policies, and control framework, ensuring legal sufficiency and regulatory alignment.
• Define LFS-specific security standards and control baselines across origination, servicing, capital markets, and corporate functions in alignment with the enterprise security strategy.
• Lead the annual LFS security program review, including risk assessment and control gap analysis, and remediation roadmap, presenting findings to senior LFS and Enterprise leadership.
• Drive preparation and delivery of board and executive-level security risk materials, translating technical and regulatory complexity into clear, action- oriented narratives.
• Serve as the business and legal security subject matter expert in regulatory exams, audits, and investor reviews, owning response materials and corrective actions action plans.
• Interpret and operationalize GLBA, FFIEC, state privacy and cybersecurity laws, and investor security requirements across all LFS operations, partnering with Legal on litigation and enforcement exposure.
• Own the LFS information security risk register, providing independent challenge to security design decisions and escalating material risks through appropriate governance channels.
• Lead security incident governance, coordinating with the CISO, IT, and Legal on investigation, notification, and disclosure, and maintaining examination-ready documentation.
• Partner with Legal and Procurement to steer third-party security risk management, defining vendor review standards, and resolving unacceptable risk through governance channels.
• Champion team development and security awareness across LFS, providing leadership and mentorship to security risk Associates and driving required training completion.
• Contribute to enterprise security budget planning as the LFS subject matter lead, managing LFS-specific security spend and vendor relationships in coordination with enterprise leadership.

Your Toolbox

• Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science, or Business Administration required; advanced degree (MBA, MS in Cybersecurity or Risk Management) preferred.
• 15+ years of progressive experience in information security, IT risk, regulatory compliance, or audit, including at least 5 years in a BISO or senior, business-Facing a security leadership role.
• Financial services or mortgage industry experience required; non-depository Mortgage lenders experience a significant differentiator.
• Proven track record leading security programs through regulatory examinations, investor audits, and incident response, including board-level reporting.
• Deep knowledge of GLBA Safeguards Rule, FFIEC guidance, state privacy and cybersecurity laws, and investor security requirements (FNMA, FHLMC, Ginnie Mae).
• Working fluency in NIST CSF/800-53, ISO 27001/27002, SOC 2, and FAIR quantitative risk analysis frameworks.
• Demonstrated ability to quantify cyber risk in financial terms and communicate it clearly to executives, Board members, and Legal leadership.
• Strong written and oral communication skills, with experience producing board- quality materials and executive risk briefings.
• CISSP, CISM, or CRISC certification required (at least two); CISA, CGRC, or ISO 27001 Lead Auditor preferred.
• Working knowledge of GRC platforms, SIEM tools, identity and access management, and third-party risk management systems.
• Discretion and sound judgment in handling sensitive consumer financial data and confidential regulatory matters.

This description outlines the basic responsibilities and requirements for the position noted. This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities and activities may change at any time with or without notice. During the course of your employment, you may be required to use, download, or access certain Company-approved tools, programs, applications, or systems. These resources may include, but are not limited to, applications designed for customer engagement, operational efficiency, data analysis, Artificial Intelligence (AI) tools, and other business functions.

Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.

Life at Lennar

At Lennar, we are committed to fostering a supportive and enriching environment for our Associates, offering a comprehensive array of benefits designed to enhance their well-being and professional growth. Our Associates have access to robust health insurance plans, including Medical, Dental, and Vision coverage, ensuring their health needs are well taken care of. Our 401(k) Retirement Plan, complete with a $1 for $1 Company Match up to 5%, helps secure their financial future, while Paid Parental Leave and an Associate Assistance Plan provide essential support during life's critical moments. To further support our Associates, we provide an Education Assistance Program and up to $30,000 in Adoption Assistance, underscoring our commitment to their diverse needs and aspirations. From the moment of hire, they can enjoy up to three weeks of vacation annually, alongside generous Holiday, Sick Leave, and Personal Day policies. Additionally, we offer a New Hire Referral Bonus Program, significant Home Purchase Discounts, and unique opportunities such as the Everyone’s Included Day. At Lennar, we believe in investing in our Associates, empowering them to thrive both personally and professionally. Lennar Associates will have access to these benefits as outlined by Lennar’s policies and applicable plan terms. Visit Lennartotalrewards.com to view our suite of benefits. Join the fun and follow us on social media to see what's happening at our company, and don't forget to connect with us on Lennar: Overview | LinkedIn for the latest job opportunities.

Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.

We’re Always Looking Ahead

Want to work in an innovative environment that empowers you to explore your passions? At Lennar, we promote asking questions and working together to solve complex problems. It’s how we’ve become a leader in the homebuilding industry and why our Associates love working

Work Where Everyone’s Included

We’re committed to building and sustaining an inclusive culture where everyone has a seat at the table, and we’re all on a first-name basis. This inclusive culture influences our hiring practices, the communities we serve and how we build better career experiences for all our Associates.

Join Our Talent Network

Join Our Talent Network Join Our Talent Network: Welcome to the Lennar Community! We are tickled, delighted and happy that you've decided to join our Talent Community! We look forward to connecting about career opportunities at Lennar.