Government and Public Sector - Service Delivery Center - Cybersecurity Risk and Change Management
EY · San Antonio, TX · 2 mo ago
HybridLegal$78k–$141k/yrFull-time
Risk Management
- Manage the ESSD ICAM Risk Register, ensuring risks are reviewed, analyzed, and updated regularly in Maestro JIRA.
- Facilitate weekly Risk Review meetings to assess risks with statuses such as "Identified," "Assigned," "Analyzed," "Monitoring," and "Escalated."
- Analyze new risks, add treatment and contingency plans, set priority levels, and assign risks to appropriate team members.
- Monitor risks with upcoming or past expiration dates, ensuring timely updates and mitigation strategies.
- Provide expert guidance on risk mitigation strategies, ensuring alignment with ICAM objectives and compliance with client regulatory requirements.
- Collaborate with stakeholders to identify potential risks in deployments, system changes, and enhancements, optimizing process efficiency and designing effective controls.
- Act as a thought leader in risk management, building credibility and fostering strong relationships across teams.
Change Management
- Coordinate and facilitate weekly Change Review Board (CRB) meetings, ensuring all Change Requests (CRs) are reviewed, prioritized, and assigned appropriately.
- Review CRs with statuses such as "Ready for CRB" and "Submitted," ensuring proper categorization and readiness for review.
- Update CR tickets in Maestro JIRA with comments, priority levels, sprint team assignments, and relevant dependencies.
- Ensure compliance with ITIL best practices and client change management standards.
- Maintain change records in the ITSM Service Management tool to comply with SLAs/KPIs and organizational processes.
- Conduct Post Implementation Reviews (PIRs) for failed or emergency changes, identifying root causes and recommending improvements.
Deployment Coordination and Release Management
- Manage Deployment Change Requests (DCRs), micro Deployment Change Requests (mDCRs), Maintenance Change Requests (MCRs), and Emergency Change Requests (ECRs) for ICAM systems.
- Facilitate Test Deployment Planning (DP) and Production Deployment Planning (DP) meetings, ensuring deployment plans are reviewed, resources are available, and technical artifacts are validated.
- Schedule and coordinate Maintenance Windows (MWs) for system deployments, ensuring all required attendees are present and deployment plans are executed efficiently.
- Review deployment artifacts, update deployment plans during maintenance windows, and ensure rollback plans are in place.
- Use MS Teams to monitor deployment requests and facilitate communication between Scrum Masters, Product Owners, and technical teams.
- Ensure deployment calendars are updated regularly and align with client schedules.
- Provide internal communications to stakeholders, including system owners, regarding deployment status, completion, and any issues encountered.
Requirements
- Strong understanding of risk management principles, frameworks, and regulatory requirements.
- Comprehensive knowledge of ITIL processes, particularly Change Management, with certification preferred.
- Familiarity with the Software Development Lifecycle and operational environments within DHS ESSD ICAM.
- Advanced interpersonal skills to engage stakeholders across all levels of the organization, fostering collaboration and building credibility.
- Proven ability to analyze complex issues, identify solutions, and negotiate resolutions in a dynamic environment.
- Excellent oral, written, and presentation skills, with the ability to adapt communication style to diverse audiences.
- Strong analytical and problem-solving skills, with experience in data-driven decision-making.
- Proficiency in Microsoft Office tools (Excel, Visio, PowerPoint) and knowledge-sharing platforms like SharePoint.
- Ability to work in rotational shifts and weekends as required.
Skills
- Bachelor’s degree in information technology, Business or other relevant discipline.
- At least 4-5 years of relevant consulting or industry experience.
- Ability to work in-person as needed.
- Experience in risk management, change management, or a related field, preferably within DHS or a federal agency.
- Experience working in a geographically dispersed and diverse team environment.
- Strong capabilities in communications and engagement strategy and delivery.
- The ability and willingness to work in excess of standard hours when necessary to support production deployments.
- Minimum of ITIL Change Management practitioner certification or equivalent experience.
- Advanced certifications in risk management or ITIL processes.