Cyber Security Governance Program Manager

Are you looking to work for a global organization whereby you can drive the Cyber Security governance policies and standards?

About the Team

Elsevier’s Information Security and Data Protection (ISDP) team leads the Company’s cybersecurity practice, safeguarding information assets, consumer data, and technology infrastructure, and fostering a security-aware culture across the organization. We partner with business and technology stakeholders to enable effective risk management and support business objectives.

About the Role

Reporting to the Director of Cybersecurity Governance & Compliance, this Program Manager role focuses on maturing Elsevier’s governance function. The position leads the development of a policy- and standards-driven governance program, defines and operationalizes the data lifecycle, leads the redesign of the security awareness training program (including role-based and new hire training and phishing simulations), and supports cybersecurity compliance certifications and related initiatives. The role partners closely with technology teams, product owners, and business stakeholders across the enterprise., * Leading the design and implementation of a policy - and standards - driven cybersecurity governance program supported by GRC tooling

• Establishing and mature a data governance and protection program across the full data lifecycle
• Defining and enforce data classification, labeling, and handling requirements, including controls to prevent inappropriate data sharing
• Establishing and maintaining enterprise security governance structures, roles, and accountability
• Serving as a trusted advisor to business and technology stakeholders on governance, risk, and compliance matters
• Driving identification, escalation, and resolution of cybersecurity GRC risks and issues
• Supporting and maintain cybersecurity compliance certifications and initiatives (e.g., ISO, PCI, HIPAA)
• Producing metrics, KPIs, and executive-level reporting to support risk-based decision making
• Leading the redesign of the security training program, including role-based security training (e.g., for developers, administrators, executives, and other high-risk roles) and new hire security training
• Designing executing and measuring phishing simulations and campaigns, using results to drive targeted follow-up training and reduce human risk

• Extensive experience in cybersecurity governance, risk, and compliance programs
• Proven experience developing and managing security policies, standards, processes, and controls
• Experience building or maturing enterprise data governance and data protection programs
• Working knowledge of security and compliance frameworks such as ISO 27001/27701, ISO 27017/27018, ISO 42001, HIPAA, PCI DSS, NIST 800-53/800-171, FedRAMP, GovRAMP, etc.
• Experience implementing and operating GRC platforms and security programs
• Experience designing, delivering, or modernizing security awareness and training programs, including role-based and new hire training, aligned to compliance requirements (e.g., ISO 27001, PCI DSS, HIPAA)
• Experience planning and running phishing simulations and campaigns, and measuring program effectiveness through metrics such as completion, click, and reporting rates
• Proven project management, analytical, and problem-solving skills

Preferred Certifications: CISSP, CISM, CISA, CHP, CHSS, SANS Security Awareness Professional (SSAP)

Elsevier employs 10,000 people worldwide, including over 2,500 technologists. We have supported the work of our research and health partners for more than 140 years. Growing from our roots in publishing, we offer knowledge and valuable analytics that help our users make breakthroughs and drive societal progress.

Digital solutions such as ScienceDirect (https://beta.elsevier.com/products/sciencedirect) , Scopus (https://beta.elsevier.com/products/scopus) , SciVal (https://beta.elsevier.com/products/scival) , ClinicalKey (https://beta.elsevier.com/products/clinicalkey) and Sherpath (https://beta.elsevier.com/products/sherpath) support strategic research management (https://beta.elsevier.com/solutions/research-analytics-management-evaluation) , R&D performance (https://beta.elsevier.com/industry) , clinical decision support (https://beta.elsevier.com/solutions/clinical-decision-support) , medical education (https://beta.elsevier.com/solutions/medical-education) , and nursing education (https://beta.elsevier.com/solutions/nursing-education) . Researchers and healthcare professionals rely on over 2,800 journals, including The Lancet (https://www.thelancet.com/) and Cell ; 46,000+ eBook titles; and iconic reference works, such as Gray’s Anatomy. With the Elsevier Foundation and our external Inclusion & Diversity Advisory Board (https://beta.elsevier.com/about/inclusion-diversity-and-equity/board) , we work in partnership with diverse stakeholders to advance inclusion and diversity (https://beta.elsevier.com/about/inclusion-diversity-and-equity) in science, research and healthcare in developing countries and around the world.

Elsevier is part of RELX (https://www.relx.com/) a global provider of information-based analytics and decision tools for professional and business customers.

U.S. National Base Pay Range: $104,900 - $174,700. Geographic differentials may apply in some locations to better reflect local market rates., RELX is a global provider of information-based analytics and decision tools for professional and business customers, enabling them to make better decisions, get better results and be more productive.

Our purpose is to benefit society by developing products that help researchers advance scientific knowledge; doctors and nurses improve the lives of patients; lawyers promote the rule of law and achieve justice and fair results for their clients; businesses and governments prevent fraud; consumers access financial services and get fair prices on insurance; and customers learn about markets and complete transactions.

Our purpose guides our actions beyond the products that we develop. It defines us as a company. Every day across RELX our employees are inspired to undertake initiatives that make unique contributions to society and the communities in which we operate.