Are you passionate about strengthening security, compliance, and risk management practices across a global technology organization?
Would you like to lead a high-performing team, drive meaningful risk outcomes, and help shape the future of enterprise security programs?
About our Team
LexisNexis Legal & Professional, which serves customers in more than 150 countries with 11,800 employees worldwide, is part of RELX (http://www.relx.com), a global provider of information-based analytics and decision tools for professional and business customers. Our company has been a long-time leader in deploying AI and advanced technologies to the legal market to improve productivity and transform the overall business and practice of law, deploying ethical and powerful generative AI solutions with a flexible, multi-model approach that prioritizes using the best model from today’s top model creators for each individual legal use case. The company employs over 2,000 technologists, data scientists, and experts to develop, test, and validate solutions in line with RELX Responsible AI Principles.
About the Role
As Manager, Security – Security Compliance & Risk Management, you will lead key security governance, risk, and compliance initiatives while managing a team responsible for supporting audit readiness, risk management, and continuous monitoring activities. This role combines strategic leadership with hands-on program ownership, helping drive effective risk-based decision making, strong security controls, and continuous improvement across the organization.
Responsibilities
- Own and operate the enterprise technology and security risk management program, including risk identification, scoring, tracking, and maintenance of the risk register
- Lead the risk exception and acceptance process, ensuring documentation, approvals, and periodic review are consistently enforced
- Drive timely identification, escalation, and resolution of cybersecurity risks and issues across the organization
- Serve as a trusted advisor to business and technology stakeholders, providing pragmatic, risk-based guidance
- Manage, coach, and develop a team of security engineers, including performance management, career growth planning, and hiring
- Set clear priorities, delegate work effectively, and maintain team capacity across concurrent audit, compliance, and continuous monitoring activities
- Produce metrics, KPIs, and dashboard-level reporting for senior leadership, including risk dashboards, compliance posture summaries, and control effectiveness metrics
- Support the CISO in preparing board and executive committee materials on the state of the security and compliance program
Requirements
- Progressive experience in information security compliance, risk management, or IT audit with demonstrated ownership of program-level responsibilities
- Experience in people management or formal team leadership, including performance management and team development
- Deep, hands-on knowledge of GRC disciplines across risk management, compliance, and control governance
- Demonstrated experience owning an enterprise risk register and managing the full risk lifecycle
- Deep working knowledge of control frameworks including NIST CSF and ISO 27001
- Proven ability to manage audit engagements end-to-end and interface directly with internal and external auditors
- Proven ability to design or mature a compliance program, driving continuous improvement across people, processes, and controls
- Ability to communicate effectively with both technical and executive audiences
Work in a Way That Works for You
We promote a healthy work/life balance across the organisation. We offer an appealing working prospect for our people. With numerous wellbeing initiatives, shared parental leave, study assistance and sabbaticals, we will help you meet your immediate responsibilities and your long-term goals.
Working Pattern
Working flexible hours - flexing the times when you work in the day to help you fit everything in and work when you are the most productive.
About the Business
LexisNexis Legal & Professional® provides legal, regulatory, and business information and analytics that help customers increase their productivity, improve decision-making, achieve better outcomes, and advance the rule of law around the world. As a digital pioneer, the company was the first to bring legal and business information online with its Lexis® and Nexis® services.
U.S. National Base Pay Range: $118,300 - $219,800. Geographic differentials may apply in some locations to better reflect local market rates. This job is eligible for an annual incentive bonus.
We know your well-being and happiness are key to a long and successful career. We are delighted to offer country specific benefits. Click here to access benefits specific to your location.
We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form or please contact 1-855-833-5120.
Criminals may pose as recruiters asking for money or personal information. We never request money or banking details from job applicants. Learn more about spotting and avoiding scams here.
Please read our Candidate Privacy Policy.
We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.
USA Job Seekers:
EEO Know Your Rights.
Skills Required
- 6-8 years progressive experience in information security compliance, risk management, or IT audit with program-level ownership
- 2-3 years of people management or formal team leadership experience
- Deep, hands-on knowledge of GRC disciplines across risk management, compliance, and control governance
- Demonstrated experience owning an enterprise risk register and managing the full risk lifecycle and executive risk reporting
- Deep working knowledge of control frameworks including NIST CSF and ISO 27001 and hands-on experience performing control mapping and gap identification; SOC 2 experience required
- Experience with technology-sector regulatory obligations (e.g., SOC 2, GDPR, CCPA) and assessing organizational impact
- Experience with FedRAMP Continuous Monitoring programs and associated compliance obligations
- Proven ability to manage audit engagements end-to-end and interface with internal and external auditors
- Proven ability to design or mature a compliance program and drive continuous improvement across people, processes, and controls
- Demonstrated ability to build relationships with technical and executive stakeholders and drive organizational remediation
- Strong written and verbal communication skills; ability to translate technical risk into clear business language for senior leadership and board audiences
- Familiarity with cloud environments (AWS, GCP, or Azure) and their risk and compliance implications
- Bachelor's degree in Information Security, Computer Science, Risk Management, or related field — or equivalent practical experience
- CRISC or CISA preferred; CISSP or CISM acceptable with demonstrated GRC focus
- Experience with GRC platforms such as ServiceNow GRC, Archer, OneTrust, or LogicGate
- Familiarity with AI governance concepts and frameworks (e.g., ISO 42001, NIST AI RMF)
- Prior experience in a SaaS, cloud, or technology product company
RELX Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about RELX and has not been reviewed or approved by RELX.
-
Retirement Support — Retirement support is positioned as a meaningful part of total rewards through a 401(k) plan with matching contributions, alongside other financial protections such as life and disability coverage. Tuition reimbursement and share purchase access further broaden the financial value of the package beyond base salary.
-
Leave & Time Off Breadth — Leave and time off breadth appears strong, with generous vacation allowances, mental health days, and options like sabbaticals and tiered PTO by tenure. Parental and caregiving leaves are described in detail, reinforcing time-away benefits as a standout component of the overall package.
-
Wellbeing & Lifestyle Benefits — Wellbeing and lifestyle benefits are supported by offerings such as mental health support (e.g., app access), EAP resources, gym-related perks, and wellness incentives. Flexible working hours and related work-life supports add to the perceived day-to-day value of benefits.
RELX Insights
What We Do
RELX is a global provider of information-based analytics for professional and business customers across industries. We help scientists make new discoveries, doctors and nurses improve the lives of patients and lawyers win cases. We prevent online fraud and money laundering, and help insurance companies evaluate and predict risk. Our events enable customers to learn about markets, source products and complete transactions. In short, we enable our customers to make better decisions, get better results and be more productive. We do this by leveraging a deep understanding of our customers to create innovative solutions which combine content and data with analytics and technology in global platforms. RELX serves customers in more than 180 countries and has offices in about 40 countries. It employs approximately 30,000 people of whom almost half are in North America. We operate in four major market segments: Scientific, Technical & Medical; Risk & Business Analytics; Legal; and Exhibitions.
