{"id":4132461,"url":"https://alion.io/job/relx-cyber-security-governance-program-manager","title":"Cyber Security Governance Program Manager","company":{"id":3770,"name":"RELX","domain":"relx.com","url":"https://alion.io/company/relx","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":116,"ghost_share":0,"stale_share":0.578,"repost_share":0.017,"time_to_fill_p50_days":42,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom","Philadelphia, United States","United States"],"countries":["GB","US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":104900,"max":174700,"currency":"USD","period":"year","gross":null,"usd_annual":174700},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"FedRAMP","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"NIST 800-53","optional":false},{"name":"PCI DSS","optional":false}],"status":"live","first_seen_at":"2026-11-11T00:00:00Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-12T09:14:21Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Cybersecurity Governance Program Manager\nLocation: Hybrid - Atlanta, GA; Philadelphia, PA; London, UK\nAre you looking to work for a global organization whereby you can drive the Cyber Security governance policies and standards?\nAbout the Team\nElsevier’s Information Security and Data Protection (ISDP) team leads the Company’s cybersecurity practice, safeguarding information assets, consumer data, and technology infrastructure, and fostering a security-aware culture across the organization. We partner with business and technology stakeholders to enable effective risk management and support business objectives.\nAbout the Role\nReporting to the Director of Cybersecurity Governance & Compliance, this Program Manager role focuses on maturing Elsevier’s governance function. The position leads the development of a policy- and standards-driven governance program, defines and operationalizes the data lifecycle, leads the redesign of the security awareness training program (including role-based and new hire training and phishing simulations), and supports cybersecurity compliance certifications and related initiatives. The role partners closely with technology teams, product owners, and business stakeholders across the enterprise.\nKey Responsibilities\nLeading the design and implementation of a policy-and standards -driven cybersecurity governance program supported by GRC tooling \nEstablishing and mature a data governance and protection program across the full data lifecycle \nDefining and enforce data classification, labeling, and handling requirements, including controls to prevent inappropriate data sharing \nEstablishing and maintaining enterprise security governance structures, roles, and accountability \nServing as a trusted advisor to business and technology stakeholders on governance, risk, and compliance matters \nDriving identification, escalation, and resolution of cybersecurity GRC risks and issues \nSupporting and maintain cybersecurity compliance certifications and initiatives (e.g., ISO, PCI, HIPAA) \nProducing metrics, KPIs, and executive-level reporting to support risk-based decision making \nLeading the redesign of the security training program, including role-based security training (e.g., for developers, administrators, executives, and other high-risk roles) and new hire security training \nDesigning executing and measuring phishing simulations and campaigns, using results to drive targeted follow-up training and reduce human risk \nQualifications\nExtensive experience in cybersecurity governance, risk, and compliance programs \nProven experience developing and managing security policies, standards, processes, and controls \nExperience building or maturing enterprise data governance and data protection programs \nWorking knowledge of security and compliance frameworks such as ISO 27001/27701, ISO 27017/27018, ISO 42001, HIPAA, PCI DSS, NIST 800-53/800-171, FedRAMP, GovRAMP, etc. \nExperience implementing and operating GRC platforms and security programs \nExperience designing, delivering, or modernizing security awareness and training programs, including role-based and new hire training, aligned to compliance requirements (e.g., ISO 27001, PCI DSS, HIPAA) \nExperience planning and running phishing simulations and campaigns, and measuring program effectiveness through metrics such as completion, click, and reporting rates \nProven project management, analytical, and problem-solving skills \nPreferred Certifications: CISSP, CISM, CISA, CHP, CHSS, SANS Security Awareness Professional (SSAP)\nElsevier employs 10,000 people worldwide, including over 2,500 technologists. We have supported the work of our research and health partners for more than 140 years. Growing from our roots in publishing, we offer knowledge and valuable analytics that help our users make breakthroughs and drive societal progress.\nDigital solutions such as ScienceDirect, Scopus, SciVal, ClinicalKey and Sherpath support strategic research management, R&D performance, clinical decision support, medical education, and nursing education. Researchers and healthcare professionals rely on over 2,800 journals, including The Lancet and Cell; 46,000+ eBook titles; and iconic reference works, such as Gray's Anatomy. With the Elsevier Foundation and our external Inclusion & Diversity Advisory Board, we work in partnership with diverse stakeholders to advance inclusion and diversity in science, research and healthcare in developing countries and around the world.\nElsevier is part of RELX a global provider of information-based analytics and decision tools for professional and business customers.\n\nU.S. National Base Pay Range: $104,900 - $174,700. Geographic differentials may apply in some locations to better reflect local market rates.\n\nThis job is eligible for an annual incentive bonus.\n\nWe know your well-being and happiness are key to a long and successful career. We are delighted to offer country specific benefits. Clickhereto access benefits specific to your location.\nWe are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form or please contact 1-855-833-5120.\nCriminals may pose as recruiters asking for money or personal information. We never request money or banking details from job applicants. Learn more about spotting and avoiding scamshere.\nPlease read our Candidate Privacy Policy.\nWe are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.\nUSA Job Seekers:\nEEO Know Your Rights.","description_format":"text","description_chars":5894,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Exhibitions","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-11-12T03:03:10Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 257","filings_12m":257,"filings_prev_12m":227,"green_card_filings_12m":0,"median_offered_wage_usd":127500,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":6}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":42,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-11-12T10:03:23Z"},"pay":{"stated_usd_annual":174700,"is_top_pay":true},"html_url":"https://alion.io/job/relx-cyber-security-governance-program-manager","json_url":"https://alion.io/job/relx-cyber-security-governance-program-manager.json","meta":{"generated_at":"2026-11-12T10:03:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20435,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3770},"rest":"https://alion.io/mcp/rest/get_company?id=3770"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frelx-cyber-security-governance-program-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frelx-cyber-security-governance-program-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frelx-cyber-security-governance-program-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/relx-cyber-security-governance-program-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frelx-cyber-security-governance-program-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4132461}},{"tool":"search_jobs","arguments":{"company":"relx.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4132461},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}