Lead Cyber Security Analyst - GRC

Lead Cyber Security GRC Analyst

We are Lennar 

Lennar is one of the nation's leading homebuilders, dedicated to making an impact and creating an extraordinary experience for their Homeowners, Communities, and Associates by building quality homes and providing exceptional customer service, giving back to the communities in which we work and live in, and fostering a culture of opportunity and growth for our Associates throughout their career. Lennar has been recognized as a Fortune 500® company and consistently ranked among the top homebuilders in the United States.

Join a Company that Empowers you to Build your Future

The Lead Security Analyst is a senior leadership position responsible for overseeing all cybersecurity activities of GRC. The Lead Analyst will drive the strategic direction of the cybersecurity program, ensuring the organization is well-protected against current and emerging threats.

• A career with purpose.

• A career built on making dreams come true.

• A career built on building zero defect homes, cost management, and adherence to schedules.

Summary

The Lead Cyber Security GRC Analyst is a senior-level position responsible for driving the strategic direction and execution of the organization's Governance, Risk, and Compliance (GRC) initiatives. This role combines deep expertise in cybersecurity risk management with strong leadership capabilities to ensure the organization is protected against current and emerging threats. The Lead Analyst will lead GRC efforts, mentor junior team members, and collaborate with internal stakeholders to align security practices with business objectives.

Your Responsibilities on the Team 

• Collaborate with internal teams to identify, assess, and mitigate security risks.

• Manage third-party risk assessments and monitor vendor security posture.

• Utilize GRC tools to document and track risk management activities.

• Analyze complex data sets to identify trends and support decision-making.

• Support compliance with internal policies and external regulatory requirements.

• Participate in security audits and assessments, and support remediation efforts.

• Maintain accurate documentation of risk assessments, treatment plans, and compliance activities.

• Drive continuous improvement in GRC processes and tools.

• Work closely with IT, Security, Legal, and Business teams to align GRC initiatives with organizational goals.

• Lead the cybersecurity team from a technical perspective, guiding strategy and execution.

• Develop and maintain the GRC framework, ensuring alignment with business objectives and industry standards.

• Serve as a subject matter expert on cybersecurity issues, advising leadership on security risks and mitigation strategies.

• Foster a culture of security awareness across the organization through training and education initiatives.

• Mentor and coach junior cybersecurity team members, providing technical guidance and leadership.

• Create and present risk posture discovery and recommendation reports to risk management leadership.

• Review technical reports from vulnerability and penetration testing assessments, and results from tabletop exercises.

• Monitor plans of action and milestones for risk remediation requirements from internal and external security assessments.

• Liaison with technical and business teams related to business continuity and disaster recovery requirements.

• Provide strong oversight of third parties, vendors, and business partners to safeguard reduce risk.

• Interact with business units to understand their plans, risk posture and tolerance, and support their vision with security in mind.

• Other work items as defined by management.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field; Master’s degree preferred.

• 7+ years of experience in cybersecurity, with a focus on GRC, third party risk management, vulnerability management, audit management, and leadership.

• Proven experience in cyber security risk assessment and risk treatment planning.

• Strong collaboration skills with internal stakeholders across a complex IT environment.

• Experience with third-party risk management using tools such as Security Scorecard and OneTrust.

• Proficiency with GRC tools, preferably AuditBoard, ServiceNow, or Archer.

• Working knowledge of Microsoft Office applications.

• Demonstrated teamwork and collaboration in