Sr Manager, Governance, Risk and Compliance

We are Lennar

Lennar is one of the nation's leading homebuilders, dedicated to making an impact and creating an extraordinary experience for their Homeowners, Communities, and Associates by building quality homes and providing exceptional customer service, giving back to the communities in which we work and live in, and fostering a culture of opportunity and growth for our Associates throughout their career. Lennar has been recognized as a Fortune 500® company and consistently ranked among the top homebuilders in the United States.

A Career that Empowers You to Build Your Future

The Sr Manager, Cybersecurity leads a specialized function within Lennar's Enterprise Security Office, owning the strategic vision, team leadership, and operational execution for Governance, Risk & Compliance (GRC). This role builds and develops a high-performing team, partners across Security Engineering, Architecture, the Cyber Fusion Center, Internal Audit, and Legal to reduce enterprise risk, and translates technical risk into clear, executive-level guidance for senior leadership.

How You Grow Here

Cybersecurity at Lennar runs a dual-track career model. The Sr Manager, Cybersecurity sits on the people-leadership track — Manager, Senior Manager, Director, Senior Director — and carries formal responsibility for hiring, developing, and managing a team. This is distinct from the parallel technical individual-contributor track (Security Engineer through Principal Security Engineer), where Staff-level and above are technical leaders who set direction and mentor others without a management title. Both tracks are valued and compensated at comparable levels; this role is for those who want to grow specifically through people leadership.

Your Responsibilities on the Team

- Own the strategic vision, roadmap, and operating framework for GRC, aligned to enterprise risk and regulatory requirements.

- Build, lead, and develop a high-performing team, including hiring, mentorship, and performance management.

- Partner cross-functionally with Security Engineering, Architecture, the Cyber Fusion Center, Internal Audit, and Legal to align priorities and reduce enterprise risk.

- Translate technical risk and program status into clear, executive-level reporting and recommendations for senior leadership.

- Establish and track metrics that demonstrate continuous improvement in GRC capabilities.

- Drive the adoption of AI tools and automation across workflows, work delivery, work organization, and reporting to increase team efficiency and effectiveness.

- Champion mentorship, career growth, and an inclusive culture across a geographically distributed team.

GRC Responsibilities

- Develop, implement, and maintain a GRC framework aligned to relevant regulatory requirements and industry standards (e.g., NIST CSF, NIST 800-53/800-171, CIS Controls, CMMC, SOX IT controls).

- Own centralized IT policy and process governance, including oversight of the exceptions management process.

- Oversee risk assessment activities across the organization to identify, assess, prioritize, and mitigate risk.

- Drive and mature the vendor and third-party cyber risk management process.

- Engage with internal audit and external auditors to support IT audits and cybersecurity assessments.

- Develop and maintain a comprehensive security awareness program for Associates.

Your Toolbox

- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field; Master's preferred.

- 8+ years of experience in cybersecurity, IT risk, or a related discipline, including 3+ years in a formal leadership or people-management capacity.

- Proven experience building and leading high-performing, geographically distributed teams.

- Exceptional communication skills, with the ability to translate complex technical topics for executive and non-technical audiences.

- Strong relationship management skills; ability to influence and drive alignment across cross-functional stakeholders without direct authority.

- Demonstrated ability to incorporate AI tools into workflows, work delivery, work organization, and reporting; comfort evaluating and adopting emerging AI-driven capabilities.

GRC Expertise

- In-depth knowledge of standard cyber controls frameworks, including CIS Controls, NIST CSF, NIST 800-53/800-171, CMMC, and SOX IT controls.

- Experience managing a third-party/vendor cyber risk management process.

- Big 4 IT audit background or experience in a large complex organization is a plus.

- Certification(s) such as CISA, CISM, CISSP, CRISC, CIA, or CGEIT desired.

Physical & Office/Site Presence Requirements:

This is primarily a sedentary office position which requires the incumbent to have the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move and carry up to 25 lbs. Finger dexterity is necessary.

This description outlines the basic responsibilities and requirements for the position noted. This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities and activities may change at any time with or without notice.

Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.

Life at Lennar

At Lennar, we are committed to fostering a supportive and enriching environment for our Associates, offering a comprehensive array of benefits designed to enhance their well-being and professional growth. Our Associates have access to robust health insurance plans, including Medical, Dental, and Vision coverage, ensuring their health needs are well taken care of. Our 401(k) Retirement Plan, complete with a $1 for $1 Company Match up to 5%, helps secure their financial future, while Paid Parental Leave and an Associate Assistance Plan provide essential support during life's critical moments. To further support our Associates, we provide an Education Assistance Program and up to $30,000 in Adoption Assistance, underscoring our commitment to their diverse needs and aspirations. From the moment of hire, they can enjoy up to three weeks of vacation annually, alongside generous Holiday, Sick Leave, and Personal Day policies. Additionally, we offer a New Hire Referral Bonus Program, significant Home Purchase Discounts, and unique opportunities such as the Everyone’s Included Day. At Lennar, we believe in investing in our Associates, empowering them to thrive both personally and professionally. Lennar Associates will have access to these benefits as outlined by Lennar’s policies and applicable plan terms. Visit Lennartotalrewards.com to view our suite of benefits.

Join the fun and follow us on social media to see what's happening at our company, and don't forget to connect with us on Lennar: Overview | LinkedIn< https://www.linkedin.com/company/lennar/ > for the latest job opportunities.

Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.