Lead Security Analyst

Lennar•Waterford, FL

6d•Onsite

About The Position

The Lead Security Analyst is a senior leadership position responsible for overseeing all cybersecurity activities of GRC. The Lead Analyst will drive the strategic direction of the cybersecurity program, ensuring the organization is well-protected against current and emerging threats.

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related field; a Master’s degree is preferred.
7+ years of experience in cybersecurity, with a focus on leadership, vulnerability management, GRC, and incident response.
Ideally familiar with one or more regulatory requirements and laws such as, but not limited to, PCI, FFIEC, Sarbanes-Oxley Act (SOX), HIPAA, GDPR, and GLBA.
Additionally, experience in one or more: ISO 17799, ITIL and NIST.
General understanding of the Factor Analysis of Information Risk (FAIR) methodology.
Strong leadership and management skills, with a proven track record of building and leading effective cybersecurity teams.
Excellent communication and presentation skills, with the ability to influence and engage stakeholders at all levels.
Advanced certifications (e.g., CISSP, CISM, CRISC) are required.

Nice To Haves

Preferable, but not required, one or more of the following: CRISC, CISSP, CISA, CGEIT, GCCC, GSEC and GISP.

Responsibilities

Lead and manage the cybersecurity team from a technical perspective, having input on/leading strategic direction and ensuring the successful execution of all cybersecurity initiatives.
Develop and maintain the GRC framework, ensuring alignment with business objectives and industry standards.
Serve as a subject matter expert on cybersecurity issues, advising leadership on security risks and mitigation strategies.
Foster a culture of security awareness across the organization through training and education initiatives.
Mentor and coach junior cybersecurity team members, providing technical guidance and leadership.
Create and present risk posture discovery and recommendation reports to risk management leadership.
Review technical reports from vulnerability and penetration testing assessments, and results from tabletop exercises.
Monitor plans of action and milestones for risk remediation requirements from internal and external security assessments, vulnerability reports, audit findings and security gaps.
Liaison with technical and business teams related to business continuity and disaster recovery requirements.
Provide strong oversight of third parties, vendors, and business partners to safeguard against undue risk presented by external entities.
Frequently interact with business units to understand their plans, risk posture and tolerance, and how to support their vision and business obligations with security and risk in mind.