> Markdown version of [/jobs/ext/522497-security-risk-management-program-manager-hybrid](https://www.wearedevelopers.com/jobs/ext/522497-security-risk-management-program-manager-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security & Risk Management Program Manager**Hybrid...

- **Company:** RELX Group plc
- **Location:** Horsham, PA, United States
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cyber Security, Software Vulnerability Management
- **Published:** June 12, 2026
- **Apply:** https://www.juju.com/job/00000000g7r9at

## About the Role

You must be a U.S. citizen to apply for this position.

You must successfully pass a background investigation and achieve Public Trust security clearance.

Must be located near the Horsham, PA location for a Hybrid onsite schedule

Requirements:

 + Strong program management experience leading complex, cross-functional initiatives.

 + Experience in information security, such as vulnerability management, risk management, GRC, or security operations.

 + Understanding of vulnerability management lifecycle processes, including asset discovery, scanning, validation, prioritization, remediation, exception handling, and reporting.

 + Proven ability to lead risk reduction or remediation initiatives across multiple technical teams.

 + Experience developing executive reporting, metrics, risk records, meeting outputs, and audit artifact and risk summaries.

 + Strong stakeholder management and communication skills across technical and business audiences.

 + Experience supporting audits, compliance reviews, evidence collection, or control validation activities.

 + Familiarity with vulnerability severity models, CVSS, exploitability, asset criticality, exposure, compensating controls, and risk-based prioritization.

 + Key Attributes of the Ideal CandidateSecurity-first mindset with strong business judgment

 + Ability to drive execution and accountability across distributed teams Comfortable operating with ambiguity and executive visibility

 + Focus on measurable outcomes and continuous improvement

## Description

+ Own and evolve the enterprise vulnerability management program, including governance, operating model, and stakeholder alignment

 + Define and execute an integrated roadmap for vulnerability management and security risk reduction initiatives

 + Establish accountability, SLAs, and execution standards across security, engineering, and infrastructure teams

 + Lead cross-functional risk reduction initiatives; manage timelines, dependencies, and escalation to ensure delivery

 + Drive prioritization based on risk exposure, business impact, and regulatory requirements

 + Align security, infrastructure, cloud, and application teams on remediation and risk reduction priorities

 + Lead risk acceptance and exception processes, including analysis, approvals, and lifecycle management

 + Maintain risk registers, treatment plans, and exception tracking aligned to business and compliance objectives

 + Ensure appropriate risk segmentation across commercial and government environments

 + Translate vulnerability and risk data into actionable insights for leadership decision-making

 + Deliver executive-level reporting on risk posture, remediation performance, and program progress

 + Define and track metrics to measure risk reduction effectiveness and execution performance

 + Ensure audit readiness through complete, traceable documentation and remediation evidence

 + Support regulatory and government requirements, including POA&M tracking and control validation


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [What is the real price of one successful line of code?](https://www.wearedevelopers.com/videos/1921-what-is-the-real-price-of-one-successful-line-of-code)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)