Government and Public Sector - Service Delivery Center - Change and Risk Management Analyst

The Government & Public Sector practice (“GPS”) of Ernst & Young provides a full range of consulting and audit services to help Federal, State, Local, and Education clients implement new ideas to achieve their mission outcomes. We deliver real change and measurable results through diverse, high-performing teams, quality work at the highest professional standards, operational know-how, and creative, bold ideas that drive innovation. We enable government clients to protect the nation, serve the people, increase public safety, improve healthcare, deliver essential public services, and help those in need.

About the role

The Risk and Change Management Senior is responsible for providing expert risk management and change management services to ensure alignment with organizational objectives, regulatory compliance, and operational excellence. This hybrid role combines strategic risk oversight with operational change management, enabling seamless transitions and mitigating risks associated with deployments, new initiatives, and system enhancements. You’ll act as a trusted advisor, collaborating across teams to identify risks, optimize processes, and ensure adherence to established frameworks and standards.

Responsibilities

• Risk Management:
  • Manage the ESSD ICAM Risk Register, ensuring risks are reviewed, analyzed, and updated regularly in Maestro JIRA.
  • Facilitate weekly Risk Review meetings to assess risks with statuses such as "Identified," "Assigned," "Analyzed," "Monitoring," and "Escalated."
  • Analyze new risks, add treatment and contingency plans, set priority levels, and assign risks to appropriate team members.
  • Monitor risks with upcoming or past expiration dates, ensuring timely updates and mitigation strategies.
  • Provide expert guidance on risk mitigation strategies, ensuring alignment with ICAM objectives and compliance with client regulatory requirements.
  • Collaborate with stakeholders to identify potential risks in deployments, system changes, and enhancements, optimizing process efficiency and designing effective controls.
  • Act as a thought leader in risk management, building credibility and fostering strong relationships across teams.
• Change Management:
  • Coordinate and facilitate weekly Change Review Board (CRB) meetings, ensuring all Change Requests (CRs) are reviewed, prioritized, and assigned appropriately.
  • Review CRs with statuses such as "Ready for CRB" and "Submitted," ensuring proper categorization and readiness for review.
  • Update CR tickets in Maestro JIRA with comments, priority levels, sprint team assignments, and relevant dependencies.
  • Ensure compliance with ITIL best practices and client change management standards.
  • Monitor and maintain change records in the ITSM Service Management tool to comply with SLAs/KPIs and organizational processes.
  • Conduct Post Implementation Reviews (PIRs) for failed or emergency changes, identifying root causes and recommending improvements.
• Deployment Coordination and Release Management:
  • Manage Deployment Change Requests (DCRs), micro Deployment Change Requests (mDCRs), Maintenance Change Requests (MCRs), and Emergency Change Requests (ECRs) for ICAM systems.
  • Facilitate Test Deployment Planning (DP) and Production Deployment Planning (DP) meetings, ensuring deployment plans are reviewed, resources are available, and technical artifacts are validated.
  • Schedule and coordinate Maintenance Windows (MWs) for system deployments, ensuring all required attendees are present and deployment plans are executed efficiently.
  • Review deployment artifacts, update deployment plans during maintenance windows, and ensure rollback plans are in place.
  • Use MS Teams to monitor deployment requests and facilitate communication between Scrum Masters, Product Owners, and technical teams.
  • Ensure deployment calendars are updated regularly and align with client schedules.
  • Provide internal communications to stakeholders, including system owners, regarding deployment status, completion, and any issues encountered.

Requirements

• Bachelor’s degree in Information Technology, Business, or other relevant discipline.
• At least 4-5 years of relevant consulting or industry experience.
• Ability to work in-person as needed.
• Ability to obtain/maintain a security clearance.
• Experience in risk management, change management, or a related field, preferably within DHS or a federal agency.
• Experience working in a geographically dispersed and diverse team environment.
• Strong capabilities in communications and engagement strategy and delivery.
• Knowledge of hybrid workforce strategy.
• Ability and willingness to work in excess of standard hours when necessary to support production deployments.
• Consistent with EY’s collaborative working model, the role is expected to include 60% in-person engagement in support of effective teaming and delivery, subject to client and business requirements.

Skills

• Strong understanding of risk management principles, frameworks, and regulatory requirements.
• Comprehensive knowledge of ITIL processes, particularly Change Management, with certification preferred.
• Familiarity with the Software Development Lifecycle and operational environments within DHS ESSD ICAM.
• Advanced interpersonal skills to engage stakeholders across all levels of the organization, fostering collaboration and building credibility.
• Proven ability to analyze complex issues, identify solutions, and negotiate resolutions in a dynamic environment.
• Excellent oral, written, and presentation skills, with the ability to adapt communication style to diverse audiences.
• Strong analytical and problem-solving skills, with experience in data-driven decision-making.
• Proficiency in Microsoft Office tools (Excel, Visio, PowerPoint) and knowledge-sharing platforms like SharePoint.
• Ability to work in rotational shifts and weekends as required.
• Supervisory experience or project management experience (preferred).
• Minimum of ITIL Change Management practitioner certification or equivalent experience.
• Advanced certifications in risk management or ITIL processes (preferred).

What We Look For

We’re interested in intellectually curious people with a genuine passion for cybersecurity. With your expertise, we’ll turn to you to speak up with innovative ideas that could make a lasting difference not only to us—but also to the industry. If you have the confidence in both your presentation and technical abilities to grow into a leading expert here, this is the role for you.

Benefits

• Competitive compensation package where you’ll be rewarded based on your performance and recognized for the value you bring to our business.
• Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
• Flexible vacation policy where you decide how much vacation time you need based on your own personal circumstances.
• Time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• Continuous learning opportunities to develop the mindset and skills to navigate future challenges.
• Tools and flexibility to make a meaningful impact in your own way.
• Transformative leadership insights, coaching, and confidence-building opportunities.

Pay

The base salary range for this job in all geographic locations in the US is $77,500 to $140,900. The base salary range for New York City Metro Area, Washington State, and California (excluding Sacramento) is $92,900 to $160,500. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills, and geography.

Schedule

• Hybrid model with an expectation to work in-person 40-60% of the time over the course of an engagement, project, or year.
• Ability to work in rotational shifts and weekends as required.
• Willingness to work in excess of standard hours when necessary to support production deployments.