Senior Security Compliance & Risk Manager

RELX; Raleigh (NC); On-site; USD 118,300 - 219,800; Full time

Benefits offered by this job

Annual incentive bonus

Job summary

RELX in Raleigh, NC seeks a seasoned leader to own and operate the enterprise technology and security risk management program. You will drive risk identification, escalation, and resolution, while serving as a trusted advisor to business and tech stakeholders.

You will manage a team of security engineers, guide audits and compliance efforts, and deliver dashboards and board-ready materials. This role emphasizes continuous improvement, audit-readiness, and pragmatic risk guidance at senior levels.

Qualifications

• 6–8 years of progressive information security compliance, risk management, or IT audit with program ownership
• 2–3 years of people management or formal team leadership experience
• Deep, hands-on knowledge of GRC disciplines across risk management, compliance, and control governance
• Experience owning an enterprise risk register and producing executive risk reporting
• Deep working knowledge of control frameworks including NIST CSF and ISO 27001; SOC 2 required
• Experience with regulatory obligations (SOC 2, GDPR, CCPA) and cloud risk implications
• Experience with FedRAMP Continuous Monitoring and audit engagements end-to-end
• Proven ability to design or mature a compliance program across people, processes, and controls
• Strong communication skills to translate risk for senior leadership
• Bachelor’s degree or equivalent practical experience

Responsibilities

• Own and operate the enterprise technology and security risk management program
• Lead risk exception and acceptance process with documented approvals
• Drive timely identification, escalation, and resolution of cybersecurity risks
• Provide risk-based guidance to stakeholders to unblock decisions
• Manage, coach, and develop a team of security engineers
• Set priorities and manage capacity across audits, compliance, and ConMon
• Produce risk dashboards and senior leadership reporting
• Support the CISO with board materials and executive communications
• Foster audit-readiness and evidence quality as ongoing standards
• Drive improvements through staff ideas and innovation

Skills

Information security

Risk management

Auditing

Leadership

Communication

Education

Bachelor’s degree in Information Security, Computer Science, Risk Management, or related field

Tools

ServiceNow GRC

Archer

OneTrust

LogicGate

Job description

RELX in Raleigh, NC seeks a seasoned leader to own and operate the enterprise technology and security risk management program. You will drive risk identification, escalation, and resolution, while serving as a trusted advisor to business and tech stakeholders.

You will manage a team of security engineers, guide audits and compliance efforts, and deliver dashboards and board-ready materials. This role emphasizes continuous improvement, audit-readiness, and pragmatic risk guidance at senior levels.