Auditor of IT Controls and Compliance at Lennar Homes

Auditor of IT Controls and Compliance

We are Lennar 

Lennar is one of the nation's leading homebuilders, dedicated to making an impact and creating an extraordinary experience for their Homeowners, Communities, and Associates by building quality homes and providing exceptional customer service, giving back to the communities in which we work and live in, and fostering a culture of opportunity and growth for our Associates throughout their career. Lennar has been recognized as a Fortune 500® company and consistently ranked among the top homebuilders in the United States.

Join a Company that Empowers you to Build your Future

The Auditor of IT Controls and Compliance conducts audits of the information technology control design and effectiveness in accordance with information technology & security, authoritative sources including the Lennar Enterprise Security Office corporate standards; Sarbanes Oxley (SOX); Control Objectives for Information and Related Technology (COBIT); National Institute of Standards and Technology (NIST); and/or International Organization of Standards (ISO). Manages audits, projects, activities and remediation plans to mitigate information technology and security risks within LTS. Assesses the information technology control environment and recommends enhancements and improvements to control activities, measures and routines.

• A career with purpose.

• A career built on making dreams come true.

• A career built on building zero defect homes, cost management, and adherence to schedules.

Your Responsibilities on the Team 

• Conducts internal, information technology audits and rigorous control self-testing programs to ensure controls are designed adequately and working effectively to mitigate information technology and security risks within agreed policies, procedures, standards and risk limits.

• Audits, assesses and ascertains that controls and processes are in place to ensure that information technology risks have been adequately managed and in line with business priorities.

• Serves as a subject matter expert on information technology policy, standards and framework and proactively bridges the gap between control requirements, technical issues and business risks.

• Proactively researches changes in the industry, information technology governance and external risk compliance landscape.

• Ensures information technology risk management practices are embedded in the enterprise and that systems and data criticality and sensitivity are defined.

• Constructs corrective action plans for resolution of control weaknesses and provides expert guidance on how to avoid and prevent similar situations in the future.

• Delivers key performance indicators on audit issue and control weakness closure rate.

• Conduct testing and validation of remediation action plans and enhancements to control routines.

• Engages the Enterprise Security Office as appropriate in support of security related control testing and remediation as warranted.

• Demonstrates effective working relationships with key stakeholders

• Incorporates business strategy into decision making process; mentors less experienced associates on strategies.

• Takes ownership within area of expertise; provides guidance to others.

• Identifies opportunities to make improvements within their area of responsibility.

• Creates and presents implementation plans approved by senior leadership.

• Prioritizes work based on business drivers; takes ownership of changes in priority.

• Excellent communication skills, both verbal and written.

• Advanced understanding of business and IT strategy / processes in their area of expertise.

• Engages in discussion of complex business topics in assigned area and captures process activities and requirements.

• Understands impact of changes in the business.

• Perform other job duties as assigned.

Technical skills:

• Strong awareness and knowledge of the following areas of information technology: cloud computing and security, governance, service management; and security authoritative sources providing control and control measurement best practices.

• Ability to provide recommended actions toward the design and operation of control measures and routines to ensure compliance with information technology and security standards, polices and applicable regulations.

• Knowledgeable in all aspects of system development lifecycle; influences methodology.

• Provides support and guidance to colleagues.

• Aligns solutions with IT strategy and standards.

• Advanced proficiency in assigned area; building skills in multiple areas.

• Analyzes requirements and advises key stakeholders regarding technical solutions and information controls for new or changed processes.

• Proposes functional designs, alternatives, and solution approaches to meet specific requirements.

• Independently solves complex problems in core technologies; understands interrelationships with other areas.

• Provides input and performs full system life cycle management activities including solution configuration; data mapping and definition, test development and execution, and system training.

• Leads small projects, ensuring requirements and timelines are met.

• Recognizes when and to whom issues should be escalated.

• Provides level 3 support functions.

• Defines solutions in alignment with IT strategy and standards.

• Application of systems analysis techniques and procedures, including consulting with users, to determine hardware, software, or system functional specifications; OR the design, development, documentation, analysis, creation, testing, or modification of computer systems or programs, including prototypes, based on and related to user or system design specifications; OR the design, documentation, testing, creation, or modification of computer programs related to machine operating systems; OR a combination of the above.

Additional Skills

• Collaborative; establishes and maintains effective working relationships, supporting company leadership and team.

• Models flexibility; influences change in area of expertise.

• Builds trust in others and works with integrity and ethically; upholds organizational values.

• Sensitive and responsive to internal and external needs; proposes new solutions.

• Resourceful; creates and implements actions that are outside of the typical concept to generate results.

• Fosters a supportive and collaborative teamwork environment.

• Takes a creative and innovative approach to problem-solving; recognizes interdependencies / impacts.

• Actively promotes diversity and seeks to understand others’ points of view.

Requirements

• Bachelor’s Degree or Certification Required.

• 5+ years of technical audit and/or related governance experience with working knowledge of information technology governance, information technology quality assurance, and/or information security risk assessment.

• Demonstrated audit experience assessing information technology, cloud security and related compliance and control measures.

• Knowledge and experience auditing Information Technology and Cloud Security controls in accordance Sarbanes Oxley (SOX); Control Objectives for Information and Related Technology (COBIT); National Institute of Standards and Technology (NIST); International Organization of Standards (ISO), and/or other related authoritative sources and standards.

• Preferred CCSP – Certified Cloud Security Professional, and Microsoft Certified: Microsoft Azure Fundamentals & Solution Architect.

• Strong knowledge of Information Technology Infrastructure Library (ITIL) and Service Management principles.

• Knowledge of critical control environments & measures related to security architectures, systems and environments.

• Excellent communication and program management skills.

Physical & Office/Site Presence Requirements:

This is primarily a sedentary office position which requires the incumbent to have the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move and carry up to 25 lbs. Finger dexterity is necessary.

Life at Lennar

At Lennar, we are committed to fostering a supportive and enriching environment for our Associates, offering a comprehensive array of benefits designed to enhance their well-being and professional growth. Our Associates have access to robust health insurance plans, including Medical, Dental, and Vision coverage, ensuring their health needs are well taken care of. Our 401(k) Retirement Plan, complete with a $1 for $1 Company Match up to 5%, helps secure their financial future, while Paid Parental Leave and an Associate Assistance Plan provide essential support during life's critical moments. To further support our Associates, we provide an Education Assistance Program and up to $30,000 in Adoption Assistance, underscoring our commitment to their diverse needs and aspirations. From the moment of hire, they can enjoy up to three weeks of vacation annually, alongside generous Holiday, Sick Leave, and Personal Day policies. Additionally, we offer a New Hire Referral Bonus Program, significant Home Purchase Discounts, and unique opportunities such as the Everyone’s Included Day. At Lennar, we believe in investing in our Associates, empowering them to thrive both personally and professionally. Lennar Associates will have access to these benefits as outlined by Lennar’s policies and applicable plan terms. Visit Lennartotalrewards.com to view our suite of benefits.

Join the fun and follow us on social media to see what's happening at our company, and don't forget to connect with us on Lennar: Overview | LinkedIn

Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.