Defining and enforce data classification, labeling, and handling requirements, including controls to prevent inappropriate data sharing
Establishing and maintaining enterprise security governance structures, roles, and accountability
Serving as a trusted advisor to business and technology stakeholders on governance, risk, and compliance matters
Driving identification, escalation, and resolution of cybersecurity GRC risks and issues
Supporting and maintain cybersecurity compliance certifications and initiatives (e.g., ISO, PCI, HIPAA)
Producing metrics, KPIs, and executive-level reporting to support risk-based decision making
Leading the redesign of the security training program, including role-based security training (e.g., for developers, administrators, executives, and other high-risk roles) and new hire security training
Designing executing and measuring phishing simulations and campaigns, using results to drive targeted follow-up training and reduce human risk
Qualifications
Extensive experience in cybersecurity governance, risk, and compliance programs
Proven experience developing and managing security policies, standards, processes, and controls
Experience building or maturing enterprise data governance and data protection programs
Working knowledge of security and compliance frameworks such as ISO 27001/27701, ISO 27017/27018, ISO 42001, HIPAA, PCI DSS, NIST 800-53/800-171, FedRAMP, GovRAMP, etc.
Experience implementing and operating GRC platforms and security programs
Experience designing, delivering, or modernizing security awareness and training programs, including role-based and new hire training, aligned to compliance requirements (e.g., ISO 27001, PCI DSS, HIPAA)
Experience planning and running phishing simulations and campaigns, and measuring program effectiveness through metrics such as completion, click, and reporting rates
Proven project management, analytical, and problem-solving skills
Preferred Certifications: CISSP, CISM, CISA, CHP, CHSS, SANS Security Awareness Professional (SSAP)
Elsevier employs 10,000 people worldwide, including over 2,500 technologists. We have supported the work of our research and health partners for more than 140 years. Growing from our roots in publishing, we offer knowledge and valuable analytics that help our users make breakthroughs and drive societal progress.
Digital solutions such as ScienceDirect, Scopus, SciVal, ClinicalKey and Sherpath support strategic research management, R&D performance, clinical decision support, medical education, and nursing education. Researchers and healthcare professionals rely on over 2,800 journals, including The Lancet and Cell; 46,000+ eBook titles; and iconic reference works, such as Gray's Anatomy. With the Elsevier Foundation and our external Inclusion & Diversity Advisory Board, we work in partnership with diverse stakeholders to advance inclusion and diversity in science, research and healthcare in developing countries and around the world.
- Elsevier is part of RELX a global provider of information-based analytics and decision tools for professional and business customers.
- 

U.S. National Base Pay Range: $104,900 - $174,700. Geographic differentials may apply in some locations to better reflect local market rates.



This job is eligible for an annual incentive bonus.






- We know your well-being and happiness are key to a long and successful career. We are delighted to offer country specific benefits. Click here to access benefits specific to your location.
We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form or please contact 1-855-833-5120.
Criminals may pose as recruiters asking for money or personal information. We never request money or banking details from job applicants. Learn more about spotting and avoiding scams here.
Please read our Candidate Privacy Policy.
We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.
USA Job Seekers
EEO Know Your Rights.
