Are you passionate about strengthening security, compliance, and risk management practices across a global technology organization?
Would you like to lead a high-performing team, drive meaningful risk outcomes, and help shape the future of enterprise security programs?
About the Role
As Manager, Security 6 Security Compliance & Risk Management, you will lead key security governance, risk, and compliance initiatives while managing a team responsible for supporting audit readiness, risk management, and continuous monitoring activities. This role combines strategic leadership with hands-on program ownership, helping drive effective risk-based decision making, strong security controls, and continuous improvement across the organization.
Responsibilities
- Own and operate the enterprise technology and security risk management program, including risk identification, scoring, tracking, and maintenance of the risk register
- Lead the risk exception and acceptance process, ensuring documentation, approvals, and periodic review are consistently enforced
- Drive timely identification, escalation, and resolution of cybersecurity risks and issues across the organization
- Serve as a trusted advisor to business and technology stakeholders, providing pragmatic, risk-based guidance
- Manage, coach, and develop a team of security engineers, including performance management, career growth planning, and hiring
- Set clear priorities, delegate work effectively, and maintain team capacity across concurrent audit, compliance, and continuous monitoring activities
- Produce metrics, KPIs, and dashboard-level reporting for senior leadership, including risk dashboards, compliance posture summaries, and control effectiveness metrics
- Support the CISO in preparing board and executive committee materials on the state of the security and compliance program
Requirements
- Progressive experience in information security compliance, risk management, or IT audit with demonstrated ownership of program-level responsibilities
- Experience in people management or formal team leadership, including performance management and team development
- Deep, hands-on knowledge of GRC disciplines across risk management, compliance, and control governance
- Demonstrated experience owning an enterprise risk register and managing the full risk lifecycle
- Deep working knowledge of control frameworks including NIST CSF and ISO 27001
- Proven ability to manage audit engagements end-to-end and interface directly with internal and external auditors
- Proven ability to design or mature a compliance program, driving continuous improvement across people, processes, and controls
- Ability to communicate effectively with both technical and executive audiences
Work in a Way That Works for You
We promote a healthy work/life balance across the organisation. We offer an appealing working prospect for our people. With numerous wellbeing initiatives, shared parental leave, study assistance and sabbaticals, we will help you meet your immediate responsibilities and your long-term goals.
Working Pattern
Working flexible hours - flexing the times when you work in the day to help you fit everything in and work when you are the most productive.
About the Business
LexisNexis Legal & Professionalprovides legal, regulatory, and business information and analytics that help customers increase their productivity, improve decision-making, achieve better outcomes, and advance the rule of law around the world. As a digital pioneer, the company was the first to bring legal and business information online with its Lexisand Nexisservices.
U.S. National Base Pay Range: $118,300 - $219,800. Geographic differentials may apply in some locations to better reflect local market rates.
This job is eligible for an annual incentive bonus.
We know your well-being and happiness are key to a long and successful career. We are delighted to offer country specific benefits. Click to access benefits specific to your location.
