> Markdown version of [/jobs/ext/1349530-senior-security-engineer-ii](https://www.wearedevelopers.com/jobs/ext/1349530-senior-security-engineer-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Engineer II

- **Company:** RELX Group plc
- **Location:** Raleigh, NC, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Engineering, Cyber Security, Information Systems, Systems Integration, Information Technology, Data Analytics
- **Published:** July 19, 2026
- **Apply:** https://www.juju.com/job/00000000ghquks

## About the Role

* Bachelor's degree in Computer Science, Information Security, Information Systems, or a related technical field, or equivalent practical experience

 * 5+ years of experience in security, compliance, or audit-focused roles

 * Proven experience leading ISO/IEC 27001 and SOC 2 audits end-to-end

 * Hands-on experience with a GRC platform (AuditBoard, Drata, Vanta, or similar) - required

 * Strong understanding and experience with control frameworks

 * Ability to translate technical implementations into audit-ready controls and documentation

 * Strong stakeholder management and auditor-facing communication skills

 * Experience in cloud-native or SaaS environments (AWS, Azure, or GCP preferred)

Preferred Qualifications

 * Experience with automation and continuous compliance

 * Certifications such as CISSP, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor

 * Multi-framework experience

 * Experience scaling compliance programs in high-growth environments

## Description

We are seeking a Senior Security Engineer to design and implement a scalable Governance, Risk, and Compliance (GRC) foundation across our cloud-based environment. This role will focus on standardizing controls, improving ownership visibility, and enabling automated evidence collection to support continuous compliance across SOC 2, ISO 27001, Cyber Essentials, and related frameworks. This is a transformation-focused role. The successful candidate will partner with compliance, security, and engineering teams to move the organization from a manual, audit-driven model to a structured, automation-enabled GRC program.

Responsibilities

GRC Platform Implementation & Automation

 * Lead implementation and administration of a GRC platform (e.g., Vanta)

 * Configure controls, evidence mapping, and integrations (AWS, identity systems, etc.)

 * Establish automated evidence collection and continuous monitoring

 * Reduce reliance on manual evidence gathering

Control Framework Development

 * Develop and maintain a unified control framework aligned to SOC 2, ISO 27001, and other standards

 * Define control statements, evidence requirements, and testing expectations

 * Map controls across frameworks to reduce duplication

 * Maintain traceability between controls and evidence

Ownership & System Mapping

 * Establish team-based ownership model for controls

 * Align systems and services to responsible teams

 * Maintain lightweight system inventory

 * Improve ownership visibility to reduce audit coordination overhead

Audit Enablement

 * Support audit readiness through well-defined and monitored controls

 * Partner with compliance team to streamline audits

 * Enable evidence reuse across frameworks

Process Standardization & Continuous Improvement

 * Standardized documentation and workflows

 * Improve efficiency and reduce audit fatigue

 * Support policy and standards development

 * Define and track compliance metrics, leveraging automation and data analytics to support continuous audit readiness and control effectiveness

 * All other duties as assigned


## Related Videos

- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [PySpark - Combining Machine Learning & Big Data](https://www.wearedevelopers.com/videos/44-pyspark-combining-machine-learning-big-data)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Data Analytics with Microsoft Fabric: End-to-End Use Case with Data Agents](https://www.wearedevelopers.com/videos/1547-data-analytics-with-microsoft-fabric-end-to-end-use-case-with-data-agents)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)