Manager Security Compliance and Risk Management

LexisNexis UK; Raleigh (NC); On-site; USD 118,000 - 220,000; Full time

Job summary

LexisNexis Legal & Professional in the United States is seeking a Manager, Security – Security Compliance & Risk Management to lead core governance, risk, and compliance initiatives and to mentor a security engineering team.

You will drive audit readiness, risk management, and continuous monitoring across a global tech organization, partnering with senior stakeholders to raise the bar on controls and performance.

Qualifications

• Progressive experience in information security compliance, risk management, or IT audit with demonstrated ownership of program-level responsibilities.
• Experience in people management or formal team leadership, including performance management and team development.
• Deep, hands-on knowledge of GRC disciplines across risk management, compliance, and control governance.
• Demonstrated experience owning an enterprise risk register and managing the full risk lifecycle.
• Deep working knowledge of control frameworks including NIST CSF and ISO 27001
• Proven ability to manage audit engagements end-to-end and interface directly with internal and external auditors
• Proven ability to design or mature a compliance program, driving continuous improvement across people, processes, and controls
• Ability to communicate effectively with both technical and executive audiences

Responsibilities

• Own and operate the enterprise technology and security risk management program, including risk identification, scoring, tracking, and maintenance of the risk register
• Lead the risk exception and acceptance process, ensuring documentation, approvals, and periodic review are consistently enforced
• Drive timely identification, escalation, and resolution of cybersecurity risks and issues across the organization
• Serve as a trusted advisor to business and technology stakeholders, providing pragmatic, risk-based guidance
• Manage, coach, and develop a team of security engineers, including performance management, career growth planning, and hiring
• Set clear priorities, delegate work effectively, and maintain team capacity across concurrent audit, compliance, and continuous monitoring activities
• Produce metrics, KPIs, and dashboard-level reporting for senior leadership, including risk dashboards, compliance posture summaries, and control effectiveness metrics
• Support the CISO in preparing board and executive committee materials on the state of the security and compliance program

Skills

Information security

Risk management

IT audit

GRC disciplines

People management

Job description

Are you passionate about strengthening security, compliance, and risk management practices across a global technology organization?

Would you like to lead a high-performing team, drive meaningful risk outcomes, and help shape the future of enterprise security programs?

About our Team

LexisNexis Legal & Professional, which serves customers in more than 150 countries with 11,800 employees worldwide, is part of RELX (http://www.relx.com), a global provider of information-based analytics and decision tools for professional and business customers. Our company has been a long-time leader in deploying AI and advanced technologies to the legal market to improve productivity and transform the overall business and practice of law, deploying ethical and powerful generative AI solutions with a flexible, multi-model approach that prioritizes using the best model from today’s top model creators for each individual legal use case. The company employs over 2,000 technologists, data scientists, and experts to develop, test, and validate solutions in line with RELX Responsible AI Principles.

About the Role

As Manager, Security – Security Compliance & Risk Management, you will lead key security governance, risk, and compliance initiatives while managing a team responsible for supporting audit readiness, risk management, and continuous monitoring activities. This role combines strategic leadership with hands‑on program ownership, helping drive effective risk‑based decision making, strong security controls, and continuous improvement across the organization.

Responsibilities

• Own and operate the enterprise technology and security risk management program, including risk identification, scoring, tracking, and maintenance of the risk register
• Lead the risk exception and acceptance process, ensuring documentation, approvals, and periodic review are consistently enforced
• Drive timely identification, escalation, and resolution of cybersecurity risks and issues across the organization
• Serve as a trusted advisor to business and technology stakeholders, providing pragmatic, risk-based guidance
• Manage, coach, and develop a team of security engineers, including performance management, career growth planning, and hiring
• Set clear priorities, delegate work effectively, and maintain team capacity across concurrent audit, compliance, and continuous monitoring activities
• Produce metrics, KPIs, and dashboard-level reporting for senior leadership, including risk dashboards, compliance posture summaries, and control effectiveness metrics
• Support the CISO in preparing board and executive committee materials on the state of the security and compliance program

Requirements

• Progressive experience in information security compliance, risk management, or IT audit with demonstrated ownership of program-level responsibilities
• Experience in people management or formal team leadership, including performance management and team development
• Deep, hands‑on knowledge of GRC disciplines across risk management, compliance, and control governance
• Demonstrated experience owning an enterprise risk register and managing the full risk lifecycle
• Deep working knowledge of control frameworks including NIST CSF and ISO 27001
• Proven ability to manage audit engagements end-to-end and interface directly with internal and external auditors
• Proven ability to design or mature a compliance program, driving continuous improvement across people, processes, and controls
• Ability to communicate effectively with both technical and executive audiences

Work in a Way That Works for You

We promote a healthy work/life balance across the organisation. We offer an appealing working prospect for our people. With numerous wellbeing initiatives, shared parental leave, study assistance and sabbaticals, we will help you meet your immediate responsibilities and your long‑term goals.

Working Pattern

Working flexible hours - flexing the times when you work in the day to help you fit everything in and work when you are the most productive.

About the Business

LexisNexis Legal & Professional® provides legal, regulatory, and business information and analytics that help customers increase their productivity, improve decision‑making, achieve better outcomes, and advance the rule of law around the world. As a digital pioneer, the company was the first to bring legal and business information online with its Lexis® and Nexis® services.

U.S. National Base Pay Range: $118,300 - $219,800. Geographic differentials may apply in some locations to better reflect local market rates.This job is eligible for an annual incentive bonus.

We know your well-being and happiness are key to a long and successful career. We are delighted to offer country specific benefits. Click here to access benefits specific to your location.

We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form or please contact 1-855-833-5120.

Please read our Candidate Privacy Policy.

We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.

USA Job Seekers:

EEO Know Your Rights.