Information Security

Senior Security Engineer I

LexisNexis Risk Solutions Group

London · Greater London · United Kingdom

Overview

In this role you strengthen security controls and drive risk assessments across internal and external stakeholders to protect information and enable business growth. You will coordinate security reviews, support certifications, and serve as a trusted client-facing security expert. You’ll partner with Security, Technology, Legal and business teams to address customer requirements, contracts, and remediation activities. This position sits at the intersection of governance, compliance and technical risk management, shaping how the organization demonstrates security and resilience. You will work in a fast-paced environment to build trust with customers and leadership alike.

Responsibilities
  • Lead and support customer security reviews, due diligence questionnaires, and audits
  • Coordinate evidence collection, track findings, and maintain documentation
  • Support security and compliance programs aligned with ISO 27001, NIST 800 Series, SOC 2, PCI and Cyber Essentials
  • Serve as a client-facing Information Security SME, providing clear responses to build customer trust
  • Partner with Security, Technology, Legal, RFP and business teams on requirements, contracts, risk, controls and remediation
  • Maintain security policies, procedures, SIG responses and regional documentation
  • Assess security programs to strengthen governance, vulnerability management, monitoring and life cycles
  • Communicate risks, findings and progress to technical teams, stakeholders, customers, auditors and leadership
Key requirements
  • Significant experience in information security, cybersecurity, IT risk, or related technology discipline
  • Strong knowledge of security across on-premises, colocation and cloud environments
  • Working knowledge of ISO 27001, NIST, SOC 2, PCI and Cyber Essentials with audit experience
  • Understanding of governance, controls, vulnerability management, monitoring, and SDLC
  • Experience managing customer security inquiries, audits, evidence requests and remediation
  • Strong project management, organizational, prioritization and change management skills
  • Excellent written and verbal communication, able to simplify complex topics for diverse audiences
  • Security or risk certifications such as CISSP, CISM or CISA valued but not required
  • Excellent communication and presentation skills
  • Customer-service orientation
  • Cross-functional collaboration
  • Cloud security and cloud compliance technologies
  • Security frameworks: ISO 27001, NIST, SOC 2, PCI, Cyber Essentials
  • Vulnerability management, monitoring and alerting

Reference: WJ-747_31186325

Find more on GigBlows

This role is listed on GigBlows for discovery and search. Hiring decisions and applications are handled by the employer or their chosen application system.