Senior Business Information Security Officer Lennar
Overview
The Sr Business Information Security Officer leads LFS's security program ensuring legal sound defensible operational effectiveness nationwide. This role translates regulatory risk into board ready controls and serves as primary liaison between Legal Compliance CISO IT and business.
What You'll Do11
- 1Own and continuously mature the WISP supporting policies and control framework ensuring legal sufficiency and regulatory alignment
- 2Define LFS specific security standards and control baselines across origination servicing capital markets and corporate functions aligning with enterprise security strategy
- 3Lead the annual security program review including risk assessment control gap analysis and remediation roadmap presenting findings to senior leadership
- 4Drive preparation and delivery of board and executive level security risk materials translating technical and regulatory complexity into clear action oriented narratives
- 5Serve as business and legal security subject matter expert in regulatory exams audits and investor reviews owning response materials and corrective action plans
- 6Interpret and operationalize GLBA FFIEC state privacy and cybersecurity laws and investor security requirements across all LFS operations partnering with Legal on litigation and enforcement exposure
- 7Own the information security risk register providing independent challenge to security design decisions and escalating material risks through governance channels
- 8Lead security incident governance coordinating with CISO IT and Legal on investigation notification and disclosure maintaining examination ready documentation
- 9Partner with Legal and Procurement to steer third party security risk management defining vendor review standards and resolving unacceptable risk through governance channels
- 10Champion team development and security awareness across LFS providing leadership and mentorship to security risk associates and driving required training completion
- 11Contribute to enterprise security budget planning as LFS subject matter lead managing LFS specific security spend and vendor relationships in coordination with enterprise leadership
Requirements5
- 1Bachelor's degree in Information Security Cybersecurity Information Systems Computer Science or Business Administration required advanced degree preferred
- 215+ years of progressive experience in information security IT risk regulatory compliance or audit including at least 5 years in a BISO or senior role
- 3Financial services or mortgage industry experience required non depository mortgage lenders experience is a differentiator
- 4Proven track record leading security programs through regulatory examinations investor audits and incident response including board level reporting
- 5Deep knowledge of GLBA Safeguards Rule FFIEC guidance state privacy and cybersecurity laws and investor security requirements FNMA FHLMC Ginnie Mae
Salary Insight
Salary not disclosed in listing
Similar open positions
Explore active roles that match your skills and interests.
Wells Fargo
VerifiedLead Information Security Engineer Wells Fargo
We seek a Lead Information Security Engineer to strengthen integration of AppSec controls across enterprise tools and CI/CD pipelines. You will improve workflow alignment between Security Architecture and Application Security functions. This role drives design and implementation of repeatable scalable automated AppSec processes. You will prioritize frameworks aligned with enterprise risk and business objectives. Transparency and reporting of AppSec processes will be enhanced. Technical leadership in tooling integration automation and process execution is required. Shift-left security strategies will be led while maintaining strong developer experience. Mitigation strategies for application security risks will be provided. Cross-functional governance participation is expected. Collaboration with control management and cybersecurity leadership is essential. Internal and external audit support is needed. Product enhancements and rule fine-tuning for defect identification are managed. Upgrades resilience continuity and compliance with enterprise standards are overseen. A team will be led to achieve objectives.
Wells Fargo
VerifiedLead Information Security Engineer at Wells Fargo
We seek a Lead Information Security Engineer to lead technical strategy for our Security Baseline Configuration program. The role drives automation and standardization across multiple organizations to enhance security posture. This position influences stakeholders without direct authority and defines baseline standards aligned with CIS Benchmarks. It creates scalable solutions while differentiating through deep expertise in security engineering and automation.
Lowe's Companies, Inc.
VerifiedInformation Security Sr Engineer Lowe's
Lead design implementation operation of information security tools and services ensuring adequate protection of information assets with acceptable levels of control. Support business and technical requirements translating them into robust enterprise security software solutions monitor test evaluate security assessments and design remediation solutions.
Wells Fargo
VerifiedSenior Lead Digital Product Owner Cybersecurity Information Protection
Wells Fargo seeks a Senior Lead Digital Product Owner focused on cybersecurity information protection reporting to the Cybersecurity Governance Product Management Director. The role drives end-to-end delivery for unstructured scanning and governance across on-prem cloud SaaS and M365 environments. You will translate strategic direction into measurable outcomes while coordinating cross-functional teams and stakeholders.
63000 Blackstone Administrative Services Partnership
VerifiedSenior Software Engineer L&C Tech Blackstone
We seek a visionary Senior Software Engineer to design cutting-edge legal and compliance technology solutions globally. This role drives technical strategy and leads development of scalable secure systems aligned with L&C requirements. The ideal candidate excels in AWS infrastructure and SaaS integration while fostering high-performing teams.
Achieve
VerifiedChief Information Security Officer (CISO), Fintech
Own the enterprise cybersecurity strategy for a leading digital personal finance company, protecting customer trust across $40B in enrollments and $11B in loan originations. You will lead a risk-based security organization, partnering with executives, the Board, and regulators to enable secure innovation in a cloud-first, heavily regulated fintech. A key focus will be scaling the program to align with SEC, SOX, and PCI DSS 4.0 expectations while embedding security as a strategic business enabler. What sets this role apart is the mandate to drive AI security governance and innovation, securing the company's next phase of growth.