Infrastructure Compliance Analyst* Hybrid in Horsham, PA

About our Team

Lexis Nexis Reed Tech brings clarity to innovation for businesses worldwide. We enable innovators to accomplish more by helping them make informed decisions, be more productive, comply with regulations, and ultimately achieve a competitive advantage for their business. Our Reed Tech suite of Single Source for Medical Devices, Single Source for Drug Products, and Navigator for Drug Labels enables life sciences companies to create product data management strategies and meet compliance deadlines on time.

We are proud to directly support and serve these innovators in their endeavors to better humankind. For more information, please visit

The Infrastructure Compliance Analyst III - Infrastructure Security serves as a senior security advisor to Infrastructure Engineering, partnering with Cloud Engineering, Platform Engineering, Site Reliability Engineering (SRE), and Systems Engineering teams to design, implement, and continuously improve secure infrastructure services. This role bridges the gap between Security, Governance Risk & Compliance (GRC), and Infrastructure by translating security requirements into practical engineering solutions that enable the business while reducing organizational risk.

• Partner with engineering teams throughout the design, implementation, and operational lifecycle to ensure infrastructure solutions are secure, scalable, resilient, and compliant.
• Interpret and translate security frameworks, regulatory requirements, and organizational security policies into actionable technical guidance for infrastructure engineers.
• Provide subject matter expertise on secure architecture, operating system hardening, identity management, cloud security, network security, encryption, certificate management, and infrastructure best practices.
• Work closely with Governance, Risk & Compliance (GRC) and Information Security teams to understand compliance objectives, security findings, audit requirements, and risk management priorities while communicating those requirements effectively to infrastructure teams.
• Guide infrastructure teams through vulnerability remediation efforts by helping prioritize findings, identifying practical remediation strategies, evaluating operational impacts, and validating successful remediation.
• Develop secure configuration standards using industry best practices including DISA STIGs, vendor hardening guidance, and organizational security baselines.
• Assist engineering teams in implementing and maintaining compliant configurations across Windows, Linux, virtualization platforms, cloud services, identity platforms, storage systems, and enterprise infrastructure.
• Aggregate, analyze, and interpret vulnerability, compliance, operational, and infrastructure data to identify trends, measure organizational risk, and recommend strategic improvements to the company’s security posture.
• Develop executive dashboards, metrics, and reporting that communicate infrastructure security health, remediation progress, compliance status, risk trends, and operational maturity.
• Collaborate with engineering leadership to prioritize security initiatives based on business risk, operational impact, and strategic objectives.
• Identify opportunities to automate security validation, compliance reporting, configuration management, vulnerability remediation, and infrastructure governance using modern engineering practices.
• Evaluate emerging technologies, security controls, and infrastructure practices to continuously modernize the organization’s security capabilities.
• Promote a “Security by Design” culture by embedding security considerations into infrastructure planning, engineering standards, operational processes, and technology roadmaps.
• Provide technical leadership during infrastructure modernization initiatives including cloud migrations, platform upgrades, operating system lifecycle management, and enterprise technology transformations.
• Participate in security architecture reviews, infrastructure design discussions, change management activities, and technical governance boards.
• Develop technical documentation, security standards, implementation guides,…