Manager Security Compliance and Risk Management

LexisNexis UK•Raleigh, NC

11d•$118,300 - $219,800

About The Position

As Manager, Security – Security Compliance & Risk Management, you will lead security governance, risk, and compliance initiatives and manage a team responsible for audit readiness, risk management, and continuous monitoring. The role combines strategic leadership with hands-on program ownership to support risk-based decision-making, effective security controls, and ongoing improvement across the organization. LexisNexis Legal & Professional serves customers in more than 150 countries and is part of RELX. It develops information, analytics, and technology solutions for legal, regulatory, and business customers.

Requirements

Progressive experience in information security compliance, risk management, or IT audit, with demonstrated ownership of program-level responsibilities.
Experience in people management or formal team leadership, including performance management and team development.
Deep, hands-on knowledge of GRC disciplines across risk management, compliance, and control governance.
Demonstrated experience owning an enterprise risk register and managing the full risk lifecycle.
Deep working knowledge of control frameworks, including NIST CSF and ISO 27001.
Proven ability to manage audit engagements end-to-end and interface directly with internal and external auditors.
Proven ability to design or mature a compliance program and drive continuous improvement across people, processes, and controls.
Ability to communicate effectively with technical and executive audiences.

Responsibilities

Own and operate the enterprise technology and security risk management program, including risk identification, scoring, tracking, and maintenance of the risk register.
Lead the risk exception and acceptance process, ensuring documentation, approvals, and periodic review are consistently enforced.
Drive timely identification, escalation, and resolution of cybersecurity risks and issues across the organization.
Advise business and technology stakeholders with pragmatic, risk-based guidance.
Manage, coach, and develop a team of security engineers, including performance management, career growth planning, and hiring.
Set priorities, delegate work, and maintain team capacity across concurrent audit, compliance, and continuous monitoring activities.
Produce metrics, KPIs, and dashboard-level reporting for senior leadership, including risk dashboards, compliance posture summaries, and control effectiveness metrics.
Support the CISO in preparing board and executive committee materials about the security and compliance program.