Senior Security Engineer I - Security & Compliance Lead

Relx Plc; Greater London; Hybrid; GBP 90,000 - 125,000; Full time

Job summary

LexisNexis Risk Solutions in London is seeking a Senior Security Engineer I to manage security reviews, risk assessments and audits across internal and external stakeholders. You will collaborate with customers, auditors and regulatory teams to strengthen controls and demonstrate compliance.

You will lead evidence gathering, coordinate across Security, Legal and RFP teams, and drive remediation activities while ensuring clear, credible responses and governance documentation.

Qualifications

• Significant experience in information security, cybersecurity, IT risk, compliance or related field.
• Strong knowledge of security across on-prem, colocation and cloud environments.
• Working knowledge of ISO 27001, NIST, SOC 2, PCI and Cyber Essentials with audit support
• Strong governance, vulnerability management, monitoring, and SDLC understanding.
• Experience managing customer security inquiries, due diligence, audits, evidence requests and remediation.
• Strong PM, organizational, prioritisation, problem-solving and cross-team coordination.
• Excellent written, verbal and presentation skills for technical and non-technical audiences.
• Certifications such as CISSP, CISM, CISA are valued but not required.

Responsibilities

• Lead and support customer security reviews, due diligence questionnaires, virtual/on-site assessments and audits.
• Coordinate evidence collection, assess control effectiveness, track findings through resolution and documentation.
• Support security and compliance programmes aligned with ISO 27001, NIST, SOC 2, PCI and Cyber Essentials.
• Serve as a client-facing Information Security subject matter expert, providing clear, accurate and timely responses.
• Partner with Security, Technology, Legal, RFP and business teams on customer requirements, contracts, security risks, controls and remediation activities.
• Help maintain security policies, procedures, controls, SIG responses and supporting documentation, including regional requirements.
• Assess security programmes and identify opportunities to strengthen governance, vulnerability management, monitoring, controls and organisational security practices.
• Communicate security risks, findings, recommendations and progress effectively to technical teams, business stakeholders, customers, auditors and senior leadership.

Skills

Information security

Cloud security

IT risk & compliance

Audits & assessments

Customer security inquiries

Governance & controls

Project management

Communication to audiences

Security frameworks (ISO27001, NIST, P

Job description

LexisNexis Risk Solutions in London is seeking a Senior Security Engineer I to manage security reviews, risk assessments and audits across internal and external stakeholders. You will collaborate with customers, auditors and regulatory teams to strengthen controls and demonstrate compliance.

You will lead evidence gathering, coordinate across Security, Legal and RFP teams, and drive remediation activities while ensuring clear, credible responses and governance documentation.