Senior Information Security & Compliance Engineer

LexisNexis; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

LexisNexis Risk Solutions is seeking an Information Security professional to manage security, compliance and risk activities across stakeholders. You will strengthen controls, respond to customer security requirements and protect the confidentiality, integrity and availability of systems and information.

You will coordinate audits, evidence requests and remediation activities, working with cross-functional teams and regulatory frameworks to maintain robust governance and security posture.

Qualifications

• Significant experience in information security, cybersecurity or IT risk and compliance.
• Knowledge of security across on-premises, colocation and cloud environments.
• Experience supporting assessments or audits against ISO 27001, NIST, SOC 2, PCI and Cyber Essentials.
• Strong governance, controls, vulnerability management, monitoring and SDLC understanding.
• Proven ability to manage customer security enquiries, audits and remediation actions.

Responsibilities

• Lead and support customer security reviews, questionnaires and audits.
• Coordinate evidence collection, assess control effectiveness and track findings through resolution.
• Support security and compliance programmes aligned with ISO 27001, NIST, SOC 2, PCI and Cyber Essentials.
• Serve as a client-facing Information Security SME, delivering clear, timely responses to build trust.
• Partner with Security, Technology, Legal and business teams on customer requirements and contract security risks.
• Help maintain security policies, controls and supporting documentation, including regional requirements.
• Assess security programmes and identify opportunities to strengthen governance and monitoring.
• Communicate security risks, findings and progress to technical teams, stakeholders and leadership.

Skills

Information security

Cybersecurity

IT risk

Compliance

Cloud security

Governance

Stakeholder management

Communication

Education

CISSP/CISM/CISA certification

Job description

LexisNexis Risk Solutions is seeking an Information Security professional to manage security, compliance and risk activities across stakeholders. You will strengthen controls, respond to customer security requirements and protect the confidentiality, integrity and availability of systems and information.

You will coordinate audits, evidence requests and remediation activities, working with cross-functional teams and regulatory frameworks to maintain robust governance and security posture.