... a BISO or senior, business-Facing a security leadership role. Financial services or mortgage ... This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities ...
... a BISO or senior, business-Facing a security leadership role. Financial services or mortgage ... This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities ...
... BISO or senior, business-Facing a security leadership role. • Financial services or mortgage ... This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities ...
... BISO or senior, business-Facing a security leadership role. • Financial services or mortgage ... This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities ...
... BISO or senior, business-Facing a security leadership role. • Financial services or mortgage ... This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities ...
... BISO or senior, business-Facing a security leadership role. • Financial services or mortgage ... This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities ...
Associate Biso information
What are the key skills and qualifications needed to thrive as an Associate BISO, and why are they important?
To thrive as an Associate BISO (Business Information Security Officer), you need a solid understanding of cybersecurity principles, risk management, and regulatory compliance, often supported by a degree in information security or a related field. Familiarity with security frameworks (such as NIST or ISO 27001), governance tools, and certifications like CISSP or CISM is highly beneficial. Strong communication, stakeholder management, and problem-solving skills help you bridge the gap between business objectives and security requirements. These competencies are crucial for effectively aligning security strategies with organizational goals and ensuring robust risk mitigation.
What is the difference between Associate Biso vs Biso?
| Aspect | Associate Biso | Biso |
|---|---|---|
| Required Credentials | Typically requires a relevant degree or certification in business or finance | Usually requires more extensive experience and advanced certifications |
| Work Environment | Entry-level, team-oriented, often in corporate or financial settings | Mid-level, more autonomous, often in financial institutions or corporate offices |
| Employer & Industry Usage | Commonly used in banking, finance, and corporate sectors | Used in similar industries but at a more senior or specialized level |
The Associate Biso role is typically an entry-level position requiring relevant certifications and a focus on supporting financial operations. In contrast, a Biso usually has more experience and handles more complex tasks independently. Both roles are common in finance and banking industries, but the Biso often functions at a higher responsibility level.
How does an Associate BISO typically collaborate with IT and business stakeholders to enhance cybersecurity practices?
An Associate BISO (Business Information Security Officer) acts as a bridge between business units and the cybersecurity team. They work closely with IT professionals to translate business needs into security requirements and ensure that security initiatives align with organizational goals. Regular collaboration involves participating in risk assessments, advising on security best practices, and helping stakeholders understand compliance obligations. This role often requires strong communication skills and the ability to balance security priorities with business objectives.
What are Associate BISOs?
Associate BISOs, or Associate Business Information Security Officers, are professionals who support the implementation and management of information security programs within an organization. They work closely with business units to ensure security policies and practices align with business objectives, helping to identify and mitigate risks. Associate BISOs often assist in developing security strategies, conducting risk assessments, and ensuring regulatory compliance. They serve as a bridge between technical security teams and business leaders, promoting security awareness and best practices across the organization.
What are the most commonly searched types of Biso jobs in Florida? The most popular types of Biso jobs in Florida are:
Full-time
Medical, Dental, Vision, Retirement
Posted 24 days ago
Lennar rating
8.0
Based on 46 frontline employees who took The Breakroom Quiz
19th of 80 rated construction
Job description
A Career that Empowers You to Build Your Future
The Sr Business Information Security Officer is Lennar Financial Services' senior information security and privacy risk leader, ensuring LFS's security program remains legally sound, defensible, and operationally effective across mortgage operations nationwide. Serving as the primary liaison between Legal, Compliance, the CISO, IT, and the business, this role translates regulatory, contractual, and litigation risk into practical, board-ready security controls. Partnering closely with LFS and enterprise security leadership, the VP owns the Written Information Security Program, leads regulatory and audit engagements, and delivers executive and board-level risk reporting. The role builds
trusted, cross-functional partnerships while holding LFS accountable to Lennar's standards of quality, value, and integrity.
Your Responsibilities on the Team
Own and continuously mature the LFS Written Information Security Program (WISP), supporting policies, and control framework, ensuring legal sufficiency and regulatory alignment.
Define LFS-specific security standards and control baselines across origination, servicing, capital markets, and corporate functions in alignment with the enterprise security strategy.
Lead the annual LFS security program review, including risk assessment and control gap analysis, and remediation roadmap, presenting findings to senior LFS and Enterprise leadership.
Drive preparation and delivery of board and executive-level security risk materials, translating technical and regulatory complexity into clear, action- oriented narratives.
Serve as the business and legal security subject matter expert in regulatory exams, audits, and investor reviews, owning response materials and corrective actions action plans.
Interpret and operationalize GLBA, FFIEC, state privacy and cybersecurity laws, and investor security requirements across all LFS operations, partnering with Legal on litigation and enforcement exposure.
Own the LFS information security risk register, providing independent challenge to security design decisions and escalating material risks through appropriate governance channels.
Lead security incident governance, coordinating with the CISO, IT, and Legal on investigation, notification, and disclosure, and maintaining examination-ready documentation.
Partner with Legal and Procurement to steer third-party security risk management, defining vendor review standards, and resolving unacceptable risk through governance channels.
Champion team development and security awareness across LFS, providing leadership and mentorship to security risk Associates and driving required training completion.
Champion team development and security awareness across LFS, providing leadership and mentorship to security risk Associates and driving required training completion.
Contribute to enterprise security budget planning as the LFS subject matter lead, managing LFS-specific security spend and vendor relationships in coordination with enterprise leadership.
Your Toolbox
Bachelor's degree in Information Security, Cybersecurity, Information Systems, Computer Science, or Business Administration required; advanced degree (MBA, MS in Cybersecurity or Risk Management) preferred.
15+ years of progressive experience in information security, IT risk, regulatory compliance, or audit, including at least 5 years in a BISO or senior, business-Facing a security leadership role.
Financial services or mortgage industry experience required; non-depository Mortgage lenders experience a significant differentiator.
Proven track record leading security programs through regulatory examinations, investor audits, and incident response, including board-level reporting.
Deep knowledge of GLBA Safeguards Rule, FFIEC guidance, state privacy and cybersecurity laws, and investor security requirements (FNMA, FHLMC, Ginnie Mae).
Working fluency in NIST CSF/800-53, ISO 27001/27002, SOC 2, and FAIR quantitative risk analysis frameworks.
Demonstrated ability to quantify cyber risk in financial terms and communicate it clearly to executives, Board members, and Legal leadership.
Strong written and oral communication skills, with experience producing board- quality materials and executive risk briefings.
CISSP, CISM, or CRISC certification required (at least two); CISA, CGRC, or ISO 27001 Lead Auditor preferred.
Working knowledge of GRC platforms, SIEM tools, identity and access management, and third-party risk management systems.
Discretion and sound judgment in handling sensitive consumer financial data and confidential regulatory matters.
This description outlines the basic responsibilities and requirements for the position noted. This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities and activities may change at any time with or without notice.
During the course of your employment, you may be required to use, download, or access certain Company-approved tools, programs, applications, or systems. These resources may include, but are not limited to, applications designed for customer engagement, operational efficiency, data analysis, Artificial Intelligence (AI) tools, and other business functions.
Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.
Life at Lennar
At Lennar, we are committed to fostering a supportive and enriching environment for our Associates, offering a comprehensive array of benefits designed to enhance their well-being and professional growth. Our Associates have access to robust health insurance plans, including Medical, Dental, and Vision coverage, ensuring their health needs are well taken care of. Our 401(k) Retirement Plan, complete with a $1 for $1 Company Match up to 5%, helps secure their financial future, while Paid Parental Leave and an Associate Assistance Plan provide essential support during life's critical moments. To further support our Associates, we provide an Education Assistance Program and up to $30,000 in Adoption Assistance, underscoring our commitment to their diverse needs and aspirations. From the moment of hire, they can enjoy up to three weeks of vacation annually, alongside generous Holiday, Sick Leave, and Personal Day policies. Additionally, we offer a New Hire Referral Bonus Program, significant Home Purchase Discounts, and unique opportunities such as the Everyone's Included Day. At Lennar, we believe in investing in our Associates, empowering them to thrive both personally and professionally. Lennar Associates will have access to these benefits as outlined by Lennar's policies and applicable plan terms. Visit Lennartotalrewards.com to view our suite of benefits.
Join the fun and follow us on social media to see what's happening at our company, and don't forget to connect with us on Lennar: Overview | LinkedIn
Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.
About Lennar
Sourced by ZipRecruiter
Since 1954, Lennar has built over one million new homes for families across America. We build in some of the nation’s most popular cities, and our communities cater to all lifestyles and family dynamics, whether you are a first-time or move-up buyer, multigenerational family, or Active Adult.
Industry
Construction
Company size
5,001 - 10,000 Employees
Headquarters location
Miami, FL, US
Year founded
1954