Sr Auditor, It Controls And Compliance (Ltg255)

Leads, manages & executes audits of the information technology control design and effectiveness in accordance with information technology & security, authoritative sources including the Lennar Enterprise Security Office corporate standards; Sarbanes Oxley (SOX); Control Objectives for Information and Related Technology (COBIT); or International Organization of Standards (ISO).  Leads & manages audits, projects, activities, and remediation plans to mitigate information technology and security risks within LTS.   Assesses the information technology control environment and recommends enhancements and improvements to control activities, measures, and routines

• Audits, assesses, and ascertains that Controls and processes are in place to ensure that information technology risks have been adequately managed and in line with business priorities
• Defines information technology policy, standards and framework and proactively bridges the gap between control requirements, technical issues, and business risks
• Proactively manages changes in the industry, information technology governance and external risk compliance landscape
• Ensure information technology risk management practices are embedded in the enterprise and that systems and data criticality and sensitivity are defined
• Constructs corrective action plans for resolution of control weaknesses and provides expert guidance on how to avoid and prevent similar situations in the future
• Define and deliver key performance indicators on audit issue and control weakness closure rate. Conduct testing and validation of remediation action plans and enhancements to control routines  
• Demonstrates effective working relationships with key stakeholders
• Incorporates business strategy into decision making process, mentors less experienced associates on strategies
•  

Technical Skills

• Experience in managing and executing assessments of information technology and security control environments
• Strong awareness and knowledge of the following areas of information technology: cloud computing and security, governance, service management; and security authoritative sources providing control and control measurement best practices
• Ability to provide expertise and recommended actions toward the design and operation of control measures and routines to ensure compliance with information technology and security standards, polices and applicable regulations
• Must rely on extensive knowledge, ingenuity, and professional experience to effectively manage ambiguity across varying levels of control environment maturity
• Proactively researches and recommends changes to business processes, information management practices and controls as well as new applications of technology in assigned area
• Knowledgeable in all aspects of system development lifecycle; influences methodology
• Provides support and guidance to colleagues

Education and Experience

• Bachelor’s degree in Computer Science, MIS or related business degree
• 10+ years of technical audit and/or related governance experience with working knowledge of information technology governance, information technology quality assurance, and/or information security risk assessment
• Strong identity management experience, preferably SailPoint
• Advanced IT processes, IT risk management, and information security experience
• Knowledge and experience auditing Information Technology and Cloud Security controls in accordance Sarbanes Oxley (SOX); Control Objectives for Information and Related Technology (COBIT); and/or other related authoritative sources and standards
• Knowledge of critical control environments & measures related to security architectures, systems, and environments
• Excellent communication and program management skills
• Advanced Excel skills including but limited to pivot tables, v-lookups and other formulas

Additional Skills:

• Experience at working as a leader and collaborator in a team-oriented environment is essential
• Can conform to shifting priorities, demands and timelines through analytical and problem-solving capabilities
• Ability to elicit cooperation from a wide variety of sources, including upper management, clients, and other departments
• Ability to bring project to successful completion through organizational dynamics
• Strong written and oral communication skills
• Strong interpersonal and operational skill sets
• Adept at conducting research into project-related issues and products – strong analytics skills
• Must be able to learn, understand, and apply new technologies
• Ability to effectively prioritize and execute tasks in a high-pressure environment
• Tenacious, driven, energetic and a high degree of professional integrity.
• Influences others and works with integrity; upholds organizational values
• Sensitive and responsive to internal and external needs
• Promotes a supportive and collaborative teamwork environment
• Evaluates interdependencies; thinks critically when solving problems
• Behaves as a role model for proper behavior related to diversity

Physical Requirements: This is primarily a sedentary office position which requires the incumbent to have the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move and carry up to 25 lbs. Finger dexterity is necessary.

Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.

This description outlines the basic responsibilities and requirements for the position noted. This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities and activities may change at any time with or without notice.