Manager Security
Sign up free to see how well your resume matches this role.
What you'll do
- Directly manage security resources aligned to RELX/ELS/ REPH/RETS, clarifying roles, responsibilities, and priorities.
- Recruit, on-board, coach, and develop team members; manage performance and career growth plans.
- Communicate vision, set standards for excellence, and motivate the team to high performance.
- Manage resource allocation, prioritization, and planning to meet business and security objectives.
- Respond to customer security inquiries using knowledge bases, generative AI tooling, and subject matter expertise.
- Lead customer-initiated audits by coordinating across GRC, security engineering, and product teams.
- Build product security narratives and complete RFPs and customer assessments with accuracy and clarity.
- Maintain and continuously improve Elsevier's public Trust Centre and related customer-facing resources.
- Liaise with Sales, Sales Operations, and Product to streamline the intake and resolution of customer trust requests.
- Utilize security domain expertise to assess risks associated with third-party service providers, implementation, and operational activities.
- Monitor, identify, and facilitate mitigation of information security risks across third-party service providers.
- Define and publish KPIs that measure the effectiveness of the team, processes, and controls.
What they're looking for
- Information Security: Strong understanding of security principles, frameworks (ISO 27001/2 including 27017/18, ISO 22301, ISO 42001), and regulatory requirements (SOX). Able to translate risk findings into clear, actionable guidance for technical and non-technical audiences.
- Customer Engagement: Proven background managing customer security inquiries, questionnaires, Trust Centre operations, client calls, customer audits, and security-related contract language.
- Communication Skills: Exceptional written, verbal, and presentation abilities; demonstrable ability to influence, collaborate, and build trust with both customers and internal stakeholders.
- People Management: 3+ years' direct people management experience; skilled at coaching, performance management, and developing high-performing teams.
- Analytical Thinking: Ability to assess complex security scenarios, interpret customer requirements, and provide tailored, well-reasoned responses.
- Project Management: Proven capability to manage multiple concurrent engagements and strategic initiatives, delivering on time with effective prioritization.
- Growth Mindset: Approaches challenges as learning opportunities; adapts to evolving industry trends and stakeholder expectations.
- Ability to quickly learn and apply enterprise AI tools and technologies to support technical workflows and business objectives
- 8+ years of IT experience, including 4+ years in information security.
- At least a bachelor’s degree holder
Summarised by NextRaise from the employer’s description, which follows in full below.
Full description from employer
KEY RESPONSIBILITIES
People & Team Leadership (25%)
- Directly manage security resources aligned to RELX/ELS/ REPH/RETS, clarifying roles, responsibilities, and priorities.
- Recruit, on-board, coach, and develop team members; manage performance and career growth plans.
- Communicate vision, set standards for excellence, and motivate the team to high performance.
- Manage resource allocation, prioritization, and planning to meet business and security objectives.
Customer Trust & Engagement (25%)
- Respond to customer security inquiries using knowledge bases, generative AI tooling, and subject matter expertise.
- Lead customer-initiated audits by coordinating across GRC, security engineering, and product teams.
- Build product security narratives and complete RFPs and customer assessments with accuracy and clarity.
- Maintain and continuously improve Elsevier's public Trust Centre and related customer-facing resources.
- Liaise with Sales, Sales Operations, and Product to streamline the intake and resolution of customer trust requests.
Risk Management & Governance (25%)
- Utilize security domain expertise to assess risks associated with third-party service providers, implementation, and operational activities.
- Monitor, identify, and facilitate mitigation of information security risks across third-party service providers.
- Define and publish KPIs that measure the effectiveness of the team, processes, and controls.
- Promote a security culture across technology and business stakeholders.
Security Implementation & Operations (25%)
- Oversee day-to-day security operations: incident management, vulnerability management, change management, and compliance monitoring.
- Review change requests with a security lens; monitor KPIs to ensure controls continuously meet business needs.
- Maintain internally developed security solutions and ensure service continuity.
- Stay current on information security technologies and commercially reasonable practices.
QUALIFICATIONS
- Information Security: Strong understanding of security principles, frameworks (ISO 27001/2 including 27017/18, ISO 22301, ISO 42001), and regulatory requirements (SOX). Able to translate risk findings into clear, actionable guidance for technical and non-technical audiences.
- Customer Engagement: Proven background managing customer security inquiries, questionnaires, Trust Centre operations, client calls, customer audits, and security-related contract language.
- Communication Skills: Exceptional written, verbal, and presentation abilities; demonstrable ability to influence, collaborate, and build trust with both customers and internal stakeholders.
- People Management: 3+ years' direct people management experience; skilled at coaching, performance management, and developing high-performing teams.
- Analytical Thinking: Ability to assess complex security scenarios, interpret customer requirements, and provide tailored, well-reasoned responses.
- Project Management: Proven capability to manage multiple concurrent engagements and strategic initiatives, delivering on time with effective prioritization.
- Growth Mindset: Approaches challenges as learning opportunities; adapts to evolving industry trends and stakeholder expectations.
Ability to quickly learn and apply enterprise AI tools and technologies to support technical workflows and business objectives
EXPERIENCE & EDUCATION
- 8+ years of IT experience, including 4+ years in information security.
- At least a bachelor’s degree holder
We know your well-being and happiness are key to a long and successful career. We are delighted to offer country specific benefits. Click here to access benefits specific to your location.
We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form or please contact 1-855-833-5120.
Criminals may pose as recruiters asking for money or personal information. We never request money or banking details from job applicants. Learn more about spotting and avoiding scams here.
Please read our Candidate Privacy Policy.
We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.
USA Job Seekers:
Company
Company facts come from this company's own listings. We only show what the postings themselves carry.