Cyber Security Governance Program Manager

RELX

. Lead the design and implementation of a policy- and standards-driven cybersecurity governance program supported by GRC tooling .

Posted 11/11/2026full-timeUnited StatesMid-LevelSenior💰 $104,900 - $174,700 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity governance, risk, and compliance, with a strong focus on developing and managing security policies, data governance programs, and compliance certifications. Proficient in executing security training programs and phishing simulations to enhance organizational security awareness.

Highest-signal resume keywords

Cybersecurity GovernanceRisk And Compliance ManagementData Governance And ProtectionGRC Platform ImplementationSecurity Awareness Training

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity GovernanceRisk ManagementData ProtectionSecurity Policy DevelopmentPhishing Simulation DesignMetrics And KPI ReportingCompliance FrameworksAnalytical SkillsProblem-Solving SkillsProject Management

Soft Skills

Advisory SkillsStakeholder EngagementCommunication SkillsCollaboration SkillsTraining Delivery

Tools & Technologies

GRC ToolingISO StandardsNIST FrameworksPCI DSSHIPAA Compliance

Certifications & Qualifications

CISSPCISMCISACHPCHSSSANS Security Awareness Professional

Industry Keywords

CybersecurityGovernanceRisk ManagementComplianceData Lifecycle

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead the design and implementation of a policy- and standards-driven cybersecurity governance program supported by GRC tooling
Establish and mature a data governance and protection program across the full data lifecycle
Define and enforce data classification, labeling, and handling requirements, including controls preventing inappropriate data sharing
Establish and maintain enterprise security governance structures, roles, and accountability
Advise business and technology stakeholders on governance, risk, and compliance matters
Drive identification, escalation, and resolution of cybersecurity GRC risks and issues
Support and maintain cybersecurity compliance certifications and initiatives, including ISO, PCI, and HIPAA
Produce metrics, KPIs, and executive-level reporting for risk-based decision-making
Redesign the security training program, including role-based and new hire security training
Design, execute, and measure phishing simulations and campaigns to reduce human risk
Partner with technology teams, product owners, and business stakeholders across the enterprise
Report to the Director of Cybersecurity Governance & Compliance

Requirements

What you’ll need

Extensive experience in cybersecurity governance, risk, and compliance programs
Proven experience developing and managing security policies, standards, processes, and controls
Experience building or maturing enterprise data governance and data protection programs
Working knowledge of ISO 27001/27701, ISO 27017/27018, ISO 42001, HIPAA, PCI DSS, NIST 800-53/800-171, FedRAMP, GovRAMP, and related frameworks
Experience implementing and operating GRC platforms and security programs
Experience designing, delivering, or modernizing security awareness and training programs, including role-based and new hire training
Experience planning and running phishing simulations and campaigns, and measuring effectiveness through completion, click, and reporting rates
Proven project management, analytical, and problem-solving skills
Preferred certifications: CISSP, CISM, CISA, CHP, CHSS, or SANS Security Awareness Professional (SSAP)

Benefits

Comp & perks

Annual incentive bonus
Country specific benefits
Workplace accommodation and adjustment support