Director, Security Compliance & Risk Management

LexisNexis; Raleigh (NC); On-site; USD 118,000 - 220,000; Full time

Job summary

LexisNexis is seeking a Manager, Security – Security Compliance & Risk Management in Raleigh to lead the enterprise risk management program and drive compliance posture. You will own risk identification, scoring, and mitigation, while guiding business and technology leaders with clear, risk-based advice across the organization.

The role emphasizes staff development, audit coordination, and the creation of risk dashboards for executive leadership, with a focus on SOC 2, GDPR, and cloud risk

Qualifications

• 6–8 years of progressive experience in information security compliance, risk management, or IT audit with program ownership
• 2–3 years of people management or formal team leadership experience
• Deep knowledge of GRC disciplines across risk management, compliance, and control governance
• Experience owning an enterprise risk register and producing executive risk reporting
• Knowledge of NIST CSF and ISO 27001 with SOC 2 experience
• Experience with regulatory obligations (SOC 2, GDPR, CCPA) and cloud risk
• Experience with FedRAMP Continuous Monitoring
• Proven ability to manage audit engagements end-to-end
• Ability to translate risk into business language for leadership

Responsibilities

• Own, operate, and continuously improve the enterprise security risk management program
• Lead risk exception and acceptance processes with documentation and approvals
• Escalate and resolve cybersecurity risks promptly across the organization
• Advise business and tech stakeholders with pragmatic risk-based guidance
• Manage, coach, and develop a security team including performance management
• Set clear priorities and balance audit, compliance, and ConMon activities
• Create metrics and dashboards for senior leadership and board materials
• Communicate risk posture to both technical and non-technical audiences

Skills

Risk management

GRC

Audit management

Communication

Cloud risk (AWS/GCP/Azure)

Regulatory knowledge (SOC 2, GDPR, CCA

FedRAMP Monitoring

Program ownership

Leadership

Education

Bachelor’s degree in Information Security/Computer Science/Risk Management or related

Tools

ServiceNow GRC

Archer

OneTrust

LogicGate

Job description

LexisNexis is seeking a Manager, Security – Security Compliance & Risk Management in Raleigh to lead the enterprise risk management program and drive compliance posture. You will own risk identification, scoring, and mitigation, while guiding business and technology leaders with clear, risk-based advice across the organization.

The role emphasizes staff development, audit coordination, and the creation of risk dashboards for executive leadership, with a focus on SOC 2, GDPR, and cloud risk