YOUR PURPOSE:

The Cybersecurity Architect, in collaboration with VP Enterprise Architecture, under the general direction of Infrastructure & Security leadership, will define the architecture and technical vision and strategy of cloud and on-premises security controls across the organization. Additionally, the candidate will operate at the intersection of Business and Technology to deliver security products that improve the security posture of Lennar’s hybrid, multi-cloud environment. This candidate will be responsible for articulating and translating the overall technical strategy, evaluating solutions and vendors. The Cybersecurity Architect will be required to effectively translate business objectives and risk management strategies into specific security processes enabled by security technologies and services.

• Develop and implement security solutions and capabilities that are clearly aligned with business, technology, and threat drivers.
• Collaborate with the governance and sourcing team to develop security strategy and roadmaps based on sound enterprise architecture practices.
• Develop and maintain security architecture artifacts (models, patterns, templates, and standards) that can be used to leverage security capabilities in projects and operations.
• Partners with enterprise security & governance teams to assess and reduce cloud security risks
• Provides clear written and verbal consulting to projects about security architecture and risk management.
• Champions the implementation of industry leading security standards and best practices across the enterprise.
• Provides advice, analysis, and recommendation on the security products in the security space.
• Develop standards and practices for data encryption and tokenization within the organization based on the organization's data classification criteria.
• Conduct vulnerability assessments and other security reviews of systems, and prioritize remediation based on the risk profile of the assets
• Coordinate with DevOps teams to advocate secure coding practices and escalate concerns related to poor coding practices.
• Participate in security assessments of existing and prospective vendors, especially those with which the organization shares confidential, restricted, regulated or other protected data.
• Support the testing and validation of internal security controls.
• Coordinate with operational and facility-management teams to assess the security of operational technology.
• Collaborates to establish multi-cloud cybersecurity architecture with a focus on proactive threat detection, security control enforcement and incident response.
• Collaborates with enterprise and domain architects to develop secure solutions.
• Collaborate with SOC teams to define and enforce security standards.

Education and Experience Requirements:

• In depth understanding of cloud cybersecurity standards, frameworks and best practices.
• Exceptional communication and interpersonal skills - including negotiation, facilitation, and consensus building skills; ability to influence and persuade, without direct control.
• Progressive information security experience across various information security / information technology risk management domains such as but not limited to: application security, infrastructure security, identity and access management, vulnerability and cyber threat management, security architecture
• Experience in identifying gaps in security architecture.
• An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative, and actionable manner.
• Experience with other cloud service providers such as AWS or Azure across SPI (e.g. SaaS, PaaS, IaaS) models and environments (Public, Private, Hybrid)
• Bachelors or Masters Degree in Computer Science or a related discipline. At least 10 years of experience in the security aspects relating to multiple platforms, operating systems, software, communications, and network protocols, or an equivalent combination of education and work experience. At least 5 years of experience designing, architecting and securing IaaS, Pass, and SaaS cloud deployments. Certifications should include CCSP, CISSP, CCSK, and other cloud vendor specific certification.

Physical Requirements:

This is primarily a sedentary office position which requires the Cybersecurity Architect to have the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move and carry up to 25 lbs. Finger dexterity is necessary.

This description outlines the basic responsibilities and requirements for the position noted. This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities and activities may change at any time with or without notice.