Cyber Security Governance Program Manager

RELX

. Lead the design and implementation of a policy- and standards-driven cybersecurity governance program supported by GRC tooling .

Posted 11/11/2026full-timeUnited StatesMid-LevelSenior💰 $104,900 - $174,700 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity governance, risk, and compliance, with a strong focus on developing and managing security policies, data governance programs, and compliance certifications. Proven ability to design and implement effective security training programs and measure their impact on organizational risk.

Highest-signal resume keywords

Cybersecurity GovernanceRisk ManagementData GovernanceGRC PlatformsSecurity Awareness Training

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity GovernanceRisk ManagementData GovernanceSecurity PoliciesCompliance StandardsPhishing SimulationsMetrics ReportingAnalytical SkillsProblem-SolvingProject Management

Soft Skills

Advisory SkillsStakeholder EngagementCommunication SkillsTraining DevelopmentCollaboration

Tools & Technologies

GRC ToolingISO 27001HIPAAPCI DSSNIST 800-53FedRAMPGovRAMP

Certifications & Qualifications

CISSPCISMCISACHPCHSSSSAP

Industry Keywords

Cybersecurity ComplianceData ProtectionSecurity TrainingRisk-Based Decision-MakingData Classification

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead the design and implementation of a policy- and standards-driven cybersecurity governance program supported by GRC tooling
Establish and mature a data governance and protection program across the full data lifecycle
Define and enforce data classification, labeling, and handling requirements, including controls to prevent inappropriate data sharing
Establish and maintain enterprise security governance structures, roles, and accountability
Advise business and technology stakeholders on governance, risk, and compliance matters
Drive identification, escalation, and resolution of cybersecurity GRC risks and issues
Support and maintain cybersecurity compliance certifications and initiatives, including ISO, PCI, and HIPAA
Produce metrics, KPIs, and executive-level reporting for risk-based decision-making
Redesign the security training program, including role-based and new hire security training
Design, execute, and measure phishing simulations and campaigns, using results to drive targeted follow-up training and reduce human risk
Partner with technology teams, product owners, and business stakeholders across the enterprise
Report to the Director of Cybersecurity Governance & Compliance

Requirements

What you’ll need

Extensive experience in cybersecurity governance, risk, and compliance programs
Proven experience developing and managing security policies, standards, processes, and controls
Experience building or maturing enterprise data governance and data protection programs
Working knowledge of ISO 27001/27701, ISO 27017/27018, ISO 42001, HIPAA, PCI DSS, NIST 800-53/800-171, FedRAMP, and GovRAMP
Experience implementing and operating GRC platforms and security programs
Experience designing, delivering, or modernizing security awareness and training programs, including role-based and new hire training
Experience planning and running phishing simulations and campaigns
Experience measuring program effectiveness through completion, click, and reporting rates
Proven project management, analytical, and problem-solving skills
Preferred certifications: CISSP, CISM, CISA, CHP, CHSS, SANS Security Awareness Professional (SSAP)

Benefits

Comp & perks

Annual incentive bonus
Country-specific benefits
Disability accommodations and adjustments during hiring process