Security Compliance & Risk Lead — Enterprise Program

Relx Plc; Raleigh (NC); On-site; USD 118,000 - 220,000; Full time

Benefits offered by this job

Flexible hours

Job summary

LexisNexis Legal & Professional in Raleigh, NC, is seeking a Manager of Security Compliance & Risk Management to lead governance, risk, and compliance initiatives and manage a team of security engineers. You will own the risk program, ensure audit readiness, and drive continuous improvement across controls.

The role partners with the CISO and senior stakeholders to deliver risk dashboards, metrics, and executive reporting, shaping enterprise security posture in a fast-paced technology

Qualifications

• Ownership of enterprise risk register and full risk lifecycle.
• Experience leading security governance, risk, and compliance programs.
• Hands-on knowledge of NIST CSF and ISO 27001.
• Proven ability to manage audit engagements end-to-end.
• Strong communication with technical and executive audiences.
• Experience managing and developing security teams.

Responsibilities

• Own and operate enterprise technology and security risk management program.
• Lead risk exception and acceptance process with documentation and reviews.
• Drive identification, escalation, and resolution of cybersecurity risks.
• Advise business/tech stakeholders with pragmatic risk guidance.
• Coach, develop, and hire security engineers; manage performance.
• Produce metrics, KPIs, and dashboards for senior leadership.

Skills

Security governance

Risk management

People management

Audit coordination

GRC disciplines

Executive communication

Job description

LexisNexis Legal & Professional in Raleigh, NC, is seeking a Manager of Security Compliance & Risk Management to lead governance, risk, and compliance initiatives and manage a team of security engineers. You will own the risk program, ensure audit readiness, and drive continuous improvement across controls.

The role partners with the CISO and senior stakeholders to deliver risk dashboards, metrics, and executive reporting, shaping enterprise security posture in a fast-paced technology