Lennar

Builds and sells single-family homes across the US

Senior Business Information Security Officer

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-timeSt. Petersburg, FL, USANo salary listedIn-person

About the Job

Requirements

A bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science, or Business Administration is required.
At least 15 years of progressive experience in information security, IT risk, regulatory compliance, or audit, including at least 5 years in a BISO or senior business-facing security leadership role.
Financial services or mortgage industry experience is required.
A proven track record leading security programs through regulatory examinations, investor audits, and incident response, including board-level reporting.
Deep knowledge of the GLBA Safeguards Rule, FFIEC guidance, state privacy and cybersecurity laws, and investor security requirements (FNMA, FHLMC, Ginnie Mae).
Working fluency in NIST CSF/800-53, ISO 27001/27002, SOC 2, and FAIR quantitative risk analysis frameworks.
Ability to quantify cyber risk in financial terms and communicate it clearly to executives, Board members, and Legal leadership.
Strong written and oral communication skills, with experience producing board-quality materials and executive risk briefings.
At least two of CISSP, CISM, or CRISC certifications are required.
Working knowledge of GRC platforms, SIEM tools, identity and access management, and third-party risk management systems.
Discretion and sound judgment in handling sensitive consumer financial data and confidential regulatory matters.

Responsibilities

Own and continuously mature the LFS Written Information Security Program (WISP), supporting policies, and control framework, ensuring legal sufficiency and regulatory alignment.
Define LFS-specific security standards and control baselines across origination, servicing, capital markets, and corporate functions in alignment with the enterprise security strategy.
Lead the annual LFS security program review, including risk assessment, control gap analysis, and remediation roadmap, and present findings to senior LFS and Enterprise leadership.
Drive preparation and delivery of board- and executive-level security risk materials, translating technical and regulatory complexity into clear, action-oriented narratives.
Serve as the business and legal security subject matter expert in regulatory exams, audits, and investor reviews, owning response materials and corrective action plans.
Interpret and operationalize GLBA, FFIEC, state privacy and cybersecurity laws, and investor security requirements across all LFS operations, partnering with Legal on litigation and enforcement exposure.
Own the LFS information security risk register, provide independent challenge to security design decisions, and escalate material risks through appropriate governance channels.
Lead security incident governance, coordinate with the CISO, IT, and Legal on investigation, notification, and disclosure, and maintain examination-ready documentation.
Partner with Legal and Procurement to steer third-party security risk management, define vendor review standards, and resolve unacceptable risk through governance channels.
Champion team development and security awareness across LFS, provide leadership and mentorship to security risk Associates, and drive required training completion.
Contribute to enterprise security budget planning as the LFS subject matter lead, managing LFS-specific security spend and vendor relationships in coordination with enterprise leadership.

Desired Qualifications

An advanced degree such as an MBA or an MS in Cybersecurity or Risk Management is preferred.
Non-depository mortgage lender experience is a significant differentiator.
CISA, CGRC, or ISO 27001 Lead Auditor certification is preferred.

A Career that Empowers You to Build Your Future

The Sr Business Information Security Officer is Lennar Financial Services' senior information security and privacy risk leader, ensuring LFS's security program remains legally sound, defensible, and operationally effective across mortgage operations nationwide. Serving as the primary liaison between Legal, Compliance, the CISO, IT, and the business, this role translates regulatory, contractual, and litigation risk into practical, board-ready security controls. Partnering closely with LFS and enterprise security leadership, the VP owns the Written Information Security Program, leads regulatory and audit engagements, and delivers executive and board-level risk reporting. The role builds
trusted, cross-functional partnerships while holding LFS accountable to Lennar's standards of quality, value, and integrity.

Your Responsibilities on the Team

•Own and continuously mature the LFS Written Information Security Program (WISP), supporting policies, and control framework, ensuring legal sufficiency and regulatory alignment.
•Define LFS-specific security standards and control baselines across origination, servicing, capital markets, and corporate functions in alignment with the enterprise security strategy.
•Lead the annual LFS security program review, including risk assessment and control gap analysis, and remediation roadmap, presenting findings to senior LFS and Enterprise leadership.
•Drive preparation and delivery of board and executive-level security risk materials, translating technical and regulatory complexity into clear, action- oriented narratives.
•Serve as the business and legal security subject matter expert in regulatory exams, audits, and investor reviews, owning response materials and corrective actions action plans.
•Interpret and operationalize GLBA, FFIEC, state privacy and cybersecurity laws, and investor security requirements across all LFS operations, partnering with Legal on litigation and enforcement exposure.
•Own the LFS information security risk register, providing independent challenge to security design decisions and escalating material risks through appropriate governance channels.
•Lead security incident governance, coordinating with the CISO, IT, and Legal on investigation, notification, and disclosure, and maintaining examination-ready documentation.

•Partner with Legal and Procurement to steer third-party security risk management, defining vendor review standards, and resolving unacceptable risk through governance channels.
•Champion team development and security awareness across LFS, providing leadership and mentorship to security risk Associates and driving required training completion.

•Contribute to enterprise security budget planning as the LFS subject matter lead, managing LFS-specific security spend and vendor relationships in coordination with enterprise leadership.

Your Toolbox

•Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science, or Business Administration required; advanced degree (MBA, MS in Cybersecurity or Risk Management) preferred.
•15+ years of progressive experience in information security, IT risk, regulatory compliance, or audit, including at least 5 years in a BISO or senior, business-Facing a security leadership role.
•Financial services or mortgage industry experience required; non-depository Mortgage lenders experience a significant differentiator.
•Proven track record leading security programs through regulatory examinations, investor audits, and incident response, including board-level reporting.
•Deep knowledge of GLBA Safeguards Rule, FFIEC guidance, state privacy and cybersecurity laws, and investor security requirements (FNMA, FHLMC, Ginnie Mae).
•Working fluency in NIST CSF/800-53, ISO 27001/27002, SOC 2, and FAIR quantitative risk analysis frameworks.
•Demonstrated ability to quantify cyber risk in financial terms and communicate it clearly to executives, Board members, and Legal leadership.
•Strong written and oral communication skills, with experience producing board- quality materials and executive risk briefings.
•CISSP, CISM, or CRISC certification required (at least two); CISA, CGRC, or ISO 27001 Lead Auditor preferred.
•Working knowledge of GRC platforms, SIEM tools, identity and access management, and third-party risk management systems.
•Discretion and sound judgment in handling sensitive consumer financial data and confidential regulatory matters.

This description outlines the basic responsibilities and requirements for the position noted. This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities and activities may change at any time with or without notice.

During the course of your employment, you may be required to use, download, or access certain Company-approved tools, programs, applications, or systems. These resources may include, but are not limited to, applications designed for customer engagement, operational efficiency, data analysis, Artificial Intelligence (AI) tools, and other business functions.

Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.

Life at Lennar

At Lennar, we are committed to fostering a supportive and enriching environment for our Associates, offering a comprehensive array of benefits designed to enhance their well-being and professional growth. Our Associates have access to robust health insurance plans, including Medical, Dental, and Vision coverage, ensuring their health needs are well taken care of. Our 401(k) Retirement Plan, complete with a $1 for $1 Company Match up to 5%, helps secure their financial future, while Paid Parental Leave and an Associate Assistance Plan provide essential support during life's critical moments. To further support our Associates, we provide an Education Assistance Program and up to $30,000 in Adoption Assistance, underscoring our commitment to their diverse needs and aspirations. From the moment of hire, they can enjoy up to three weeks of vacation annually, alongside generous Holiday, Sick Leave, and Personal Day policies. Additionally, we offer a New Hire Referral Bonus Program, significant Home Purchase Discounts, and unique opportunities such as the Everyone’s Included Day. At Lennar, we believe in investing in our Associates, empowering them to thrive both personally and professionally. Lennar Associates will have access to these benefits as outlined by Lennar’s policies and applicable plan terms. Visit Lennartotalrewards.com to view our suite of benefits.

Join the fun and follow us on social media to see what's happening at our company, and don't forget to connect with us on Lennar: Overview | LinkedIn<https://www.linkedin.com/company/lennar/> for the latest job opportunities.

Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.

About the Company

Lennar

Builds and sells single-family homes across the US

Lennar builds and sells single-family homes across the United States and is one of the country's largest homebuilders by deliveries and revenue. Its Everything's Included approach builds popular features into the base price of each home instead of selling upgrades separately, which keeps its floor plans and building materials consistent. Lennar buys land, develops communities and builds homes in markets from Florida and Texas to Colorado and California. It earns most revenue from home sales and adds mortgage, title and closing fees through its financial services arm. The company was founded in 1954 as a local Miami builder and is headquartered in Miami, Florida.

Company size: 10,001+
Company stage: IPO
Headquarters: Miami, FL
Founded: 1954

Recently Posted Jobs

Explore more opportunities at Lennar

See more jobs