Security Governance & Risk Management Leader

LexisNexis Legal & Professional group; Raleigh (NC); On-site; USD 118,000 - 220,000; Full time

Job summary

LexisNexis Legal & Professional in the United States is seeking a Manager, Security – Security Compliance & Risk Management to lead core governance, risk, and compliance initiatives and to mentor a security engineering team.

You will drive audit readiness, risk management, and continuous monitoring across a global tech organization, partnering with senior stakeholders to raise the bar on controls and performance.

Qualifications

• Progressive experience in information security compliance, risk management, or IT audit with demonstrated ownership of program-level responsibilities.
• Experience in people management or formal team leadership, including performance management and team development.
• Deep, hands-on knowledge of GRC disciplines across risk management, compliance, and control governance.
• Demonstrated experience owning an enterprise risk register and managing the full risk lifecycle.
• Deep working knowledge of control frameworks including NIST CSF and ISO 27001
• Proven ability to manage audit engagements end-to-end and interface directly with internal and external auditors
• Proven ability to design or mature a compliance program, driving continuous improvement across people, processes, and controls
• Ability to communicate effectively with both technical and executive audiences

Responsibilities

• Own and operate the enterprise technology and security risk management program, including risk identification, scoring, tracking, and maintenance of the risk register
• Lead the risk exception and acceptance process, ensuring documentation, approvals, and periodic review are consistently enforced
• Drive timely identification, escalation, and resolution of cybersecurity risks and issues across the organization
• Serve as a trusted advisor to business and technology stakeholders, providing pragmatic, risk-based guidance
• Manage, coach, and develop a team of security engineers, including performance management, career growth planning, and hiring
• Set clear priorities, delegate work effectively, and maintain team capacity across concurrent audit, compliance, and continuous monitoring activities
• Produce metrics, KPIs, and dashboard-level reporting for senior leadership, including risk dashboards, compliance posture summaries, and control effectiveness metrics
• Support the CISO in preparing board and executive committee materials on the state of the security and compliance program

Skills

Information security

Risk management

IT audit

GRC disciplines

People management

Job description

LexisNexis Legal & Professional in the United States is seeking a Manager, Security – Security Compliance & Risk Management to lead core governance, risk, and compliance initiatives and to mentor a security engineering team.

You will drive audit readiness, risk management, and continuous monitoring across a global tech organization, partnering with senior stakeholders to raise the bar on controls and performance.