Job Description
This position is a Hybrid role on site in the Raleigh N.C. office 2-3 days a week. Senior Security Engineer II - Compliance Automation & Controls About Us LexisNexis, a part of RELX, is a leading global provider of legal, regulatory, and business information. We help customers increase productivity and improve decision-making and outcomes. Our 10,500 experts and innovative tools help us shape a better world for our customers and communities. About the Role We are seeking a Senior Security Engineer to design and implement a scalable Governance, Risk, and Compliance (GRC) foundation across our cloud-based environment. This role will focus on standardizing controls, improving ownership visibility, and enabling automated evidence collection to support continuous compliance across SOC 2, ISO 27001, Cyber Essentials, and related frameworks. This is a transformation-focused role. The successful candidate will partner with compliance, security, and engineering teams to move the organization from a manual, audit-driven model to a structured, automation-enabled GRC program. Responsibilities GRC Platform Implementation & Automation · Lead implementation and administration of a GRC platform (e.g., Vanta) · Configure controls, evidence mapping, and integrations (AWS, identity systems, etc.) · Establish automated evidence collection and continuous monitoring · Reduce reliance on manual evidence gathering Control Framework Development · Develop and maintain a unified control framework aligned to SOC 2, ISO 27001, and other standards · Define control statements, evidence requirements, and testing expectations · Map controls across frameworks to reduce duplication · Maintain traceability between controls and evidence Ownership & System Mapping · Establish team-based ownership model for controls · Align systems and services to responsible teams <