Senior Security Engineer I

Relx Plc; Greater London; Hybrid; GBP 90,000 - 125,000; Full time

Job summary

LexisNexis Risk Solutions in London is seeking a Senior Security Engineer I to manage security reviews, risk assessments and audits across internal and external stakeholders. You will collaborate with customers, auditors and regulatory teams to strengthen controls and demonstrate compliance.

You will lead evidence gathering, coordinate across Security, Legal and RFP teams, and drive remediation activities while ensuring clear, credible responses and governance documentation.

Qualifications

• Significant experience in information security, cybersecurity, IT risk, compliance or related field.
• Strong knowledge of security across on-prem, colocation and cloud environments.
• Working knowledge of ISO 27001, NIST, SOC 2, PCI and Cyber Essentials with audit support
• Strong governance, vulnerability management, monitoring, and SDLC understanding.
• Experience managing customer security inquiries, due diligence, audits, evidence requests and remediation.
• Strong PM, organizational, prioritisation, problem-solving and cross-team coordination.
• Excellent written, verbal and presentation skills for technical and non-technical audiences.
• Certifications such as CISSP, CISM, CISA are valued but not required.

Responsibilities

• Lead and support customer security reviews, due diligence questionnaires, virtual/on-site assessments and audits.
• Coordinate evidence collection, assess control effectiveness, track findings through resolution and documentation.
• Support security and compliance programmes aligned with ISO 27001, NIST, SOC 2, PCI and Cyber Essentials.
• Serve as a client-facing Information Security subject matter expert, providing clear, accurate and timely responses.
• Partner with Security, Technology, Legal, RFP and business teams on customer requirements, contracts, security risks, controls and remediation activities.
• Help maintain security policies, procedures, controls, SIG responses and supporting documentation, including regional requirements.
• Assess security programmes and identify opportunities to strengthen governance, vulnerability management, monitoring, controls and organisational security practices.
• Communicate security risks, findings, recommendations and progress effectively to technical teams, business stakeholders, customers, auditors and senior leadership.

Skills

Information security

Cloud security

IT risk & compliance

Audits & assessments

Customer security inquiries

Governance & controls

Project management

Communication to audiences

Security frameworks (ISO27001, NIST, P

Job description

## Senior Security Engineer IApply: London Wall: Full time: Posted Today: R119706**Are you passionate about helping customers navigate complex security and compliance requirements while building trust and enabling business growth?** **Do you enjoy collaborating across technology, legal, and business teams to strengthen security controls, manage risk, and support a secure, resilient organisation?**### **About the Business**LexisNexis Risk Solutions provides customers with solutions and decision tools that combine public and industry-specific content with advanced technology and analytics to assist them in evaluating and predicting risk and enhancing operational efficiency. We use the power of data and advanced analytics to help our customers make better, timelier decisions. By bringing clarity to information, we ultimately help make communities safer, insurance rates more accurate, commerce more transparent, business decisions easier and processes more efficient. You can learn more about LexisNexis Risk at https://risk.lexisnexis.com/### **About the Role**As an Information Security professional, you will manage and support security, compliance and risk assessment activities across internal and external stakeholders, including customers, auditors, service providers and regulators. You will play a key role in strengthening security controls, supporting compliance initiatives, responding to customer security requirements and helping protect the confidentiality, integrity and availability of organisational systems and information.### **Responsibilities*** Lead and support customer security reviews, due diligence questionnaires, virtual/on-site assessments and internal and external compliance or certification audits.* Coordinate evidence collection, assess control effectiveness, track findings through resolution and maintain organised documentation and repositories.* Support security and compliance programmes aligned with frameworks such as ISO 27001, NIST 800 Series, SOC 2, PCI and Cyber Essentials.* Serve as a client-facing Information Security subject matter expert, providing clear, accurate and timely responses that build customer trust and support new and existing business.* Partner with Security, Technology, Legal, RFP and business teams on customer requirements, contracts, security risks, controls and remediation activities.* Help maintain security policies, procedures, controls, SIG responses and supporting documentation, including applicable regional requirements.* Assess security programmes and identify opportunities to strengthen governance, vulnerability management, monitoring, controls and organisational security practices.* Communicate security risks, findings, recommendations and progress effectively to technical teams, business stakeholders, customers, auditors and senior leadership.### **Requirements*** Significant experience in information security, cybersecurity, IT risk, compliance or a related technology discipline; equivalent practical experience is welcomed.* Strong knowledge of security across on-premises, colocation and cloud environments, including cloud security and compliance technologies.* Working knowledge of security and compliance frameworks such as ISO 27001, NIST, SOC 2, PCI and Cyber Essentials, with experience supporting assessments or audits.* Strong understanding of security governance and controls, vulnerability management, monitoring and alerting, and system, security and software development life cycles.* Experience managing customer security enquiries, due diligence questionnaires, audits, assessments, evidence requests and remediation or follow-up activities.* Strong project management, organisational, prioritisation, problem-solving and change management skills, with the ability to coordinate work across multiple teams.* Excellent written, verbal, presentation and customer-service skills, with the ability to clearly communicate complex security topics to technical and non-technical audiences.* Relevant security or risk certifications such as CISSP, CISM, CISA or comparable credentials are valued but not required. **We know your well-being and happiness are key to a long and successful career. We are delighted to offer country specific benefits. Click** **here** **to access benefits specific to your location.**We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form or please contact 1-855-833-5120.**Criminals may pose as recruiters asking for money or personal information. We never request money or banking details from job applicants. Learn more about spotting and avoiding scams** **here****.**Please read our Candidate Privacy Policy.We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.