Security Program Manager

About the role

We are seeking a Security Program Manager within the Resilience and Security Services organization. This role reports directly to the Director, Resilience and Security Services and serves as Lennar's primary point of contact for internal and external audit engagements and regulatory inquiries. The Security Program Manager will run the enterprise program that maintains Lennar's NIST Cybersecurity Framework (CSF) controls, backed by clear, current policy and verifiable evidence of adherence. This is a program management role at its core, focusing on assurance program execution, policy lifecycle management, and audit response.

Responsibilities

• Lead and manage the enterprise assurance program as a structured, multi-workstream initiative, applying disciplined program and project management practices (Agile, Waterfall, or hybrid) to keep deliverables on time and within scope.
• Build and maintain the year-long assurance calendar, aligning evidence-gathering activity, policy reviews, and audit response with Lennar's regulatory and audit calendars.
• Own the enterprise policy library: maintain an accurate, current inventory of every policy tied to an enforced NIST CSF control, manage the policy lifecycle on an annual review cadence, and review policies for clarity, completeness, and fidelity to control intent.
• Design and maintain the standard process flow for policy development, ensuring a clear, repeatable path to compliance with Security’s final review and sign-off authority.
• Own the evidence library: ensure evidence is properly cataloged, stored, and retrievable, and refresh evidence approaching the end of its one-year validity window.
• Serve as Lennar's primary liaison to internal and external audit teams and regulatory bodies, leading audit and regulatory evidence requests with a service-oriented, no-surprises approach.
• Partner with control and policy owners across the LTG federation, providing guidance and facilitating solution-oriented working sessions to keep policy work on track.
• Lead the evaluation and selection of systems of record for the policy and evidence libraries (e.g., SharePoint, AuditBoard).
• Identify and assess security and compliance risks from policy gaps, control weaknesses, or stale evidence, escalating substantive issues to Security leadership.
• Communicate program status, risks, and issues to stakeholders and senior management in clear, executive-ready formats.
• Mentor program contributors, including a proposed Security Analyst II role, fostering a culture of continuous improvement.
• Analyze multi-domain assurance trend data (e.g., audit findings, evidence turnaround, policy currency) to institutionalize process improvements.
• Maintain the assurance program's source of truth in Lennar's management platforms, ensuring artifacts meet global security and audit control standards.
• Define program requirements, manage milestones, form working teams, establish budgets, and monitor progress through activity tracking and progress reports.

Requirements

• 7+ years of professional experience in IT project/program management, audit, risk, compliance, or governance, including at least 5 years leading multi-workstream projects or programs.
• Proven program/project management discipline with experience in Agile (Scrum, XP), Waterfall/Predictive, and hybrid methodologies; PMP certification preferred.
• Extremely detail-oriented and hyper-organized, capable of managing concurrent, time-sensitive deliverables (e.g., policy reviews, evidence requests, audit responses).
• Experience interacting with internal or external audit teams, with a service-oriented mindset and professional presence.
• Ability to read, interpret, and translate policy intent into practical guidance for control owners; collaborative and personable coaching style.
• Working knowledge of the NIST Cybersecurity Framework (CSF) and NIST SP 800-53 control families; familiarity with SOC, PCI, and FFIEC compliance requirements is a plus.
• Insight into cybersecurity and IT auditing, including security risk and vulnerability identification, is a major plus.
• Experience selecting, implementing, or administering Security and document management platforms; direct experience with AuditBoard and SharePoint preferred.
• Exceptional written and verbal communication skills, with an emphasis on facilitating solution-oriented meetings and briefing VP/SVP-level stakeholders.
• Strong organizational and time management skills, with the ability to manage multiple priorities in a fast-paced environment.
• Bachelor’s degree in Business, Information Systems, Risk Management, or a related field; Master's degree preferred or equivalent experience.
• Certifications a plus: PMP, CISA, CRISC, CIA, CGEIT, CISSP, or equivalent.

Physical & Office Requirements

• Regular, in-person attendance at the Lennar office during regular work hours is required.
• Primarily a sedentary office position with the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move up to 25 lbs. Finger dexterity is necessary.

Benefits

• Robust health insurance plans, including Medical, Dental, and Vision coverage.
• 401(k) Retirement Plan with a $1 for $1 Company Match up to 5%.
• Paid Parental Leave and Associate Assistance Plan.
• Education Assistance Program and up to $30,000 in Adoption Assistance.
• Up to three weeks of vacation annually, alongside generous Holiday, Sick Leave, and Personal Day policies.
• New Hire Referral Bonus Program and significant Home Purchase Discounts.
• Everyone’s Included Day and other unique opportunities.

Lennar Associates will have access to these benefits as outlined by Lennar’s policies and applicable plan terms. Visit lennartotalrewards.com to view the full suite of benefits.