Government and Public Sector - Service Delivery Center - Cybersecurity Risk and Change Management

Risk Management

• Manage the ESSD ICAM Risk Register, ensuring risks are reviewed, analyzed, and updated regularly in Maestro JIRA.
• Facilitate weekly Risk Review meetings to assess risks with statuses such as "Identified," "Assigned," "Analyzed," "Monitoring," and "Escalated."
• Analyze new risks, add treatment and contingency plans, set priority levels, and assign risks to appropriate team members.
• Monitor risks with upcoming or past expiration dates, ensuring timely updates and mitigation strategies.
• Provide expert guidance on risk mitigation strategies, ensuring alignment with ICAM objectives and compliance with client regulatory requirements.
• Collaborate with stakeholders to identify potential risks in deployments, system changes, and enhancements, optimizing process efficiency and designing effective controls.

Change Management

• Coordinate and facilitate weekly Change Review Board (CRB) meetings, ensuring all Change Requests (CRs) are reviewed, prioritized, and assigned appropriately.
• Review CRs with statuses such as "Ready for CRB" and "Submitted," ensuring proper categorization and readiness for review.
• Update CR tickets in Maestro JIRA with comments, priority levels, sprint team assignments, and relevant dependencies.
• Ensure compliance with ITIL best practices and client change management standards.
• Maintain change records in the ITSM Service Management tool to comply with SLAs/KPIs and organizational processes.
• Conduct Post Implementation Reviews (PIRs) for failed or emergency changes, identifying root causes and recommending improvements.

Deployment Coordination and Release Management

• Manage Deployment Change Requests (DCRs), micro Deployment Change Requests (mDCRs), Maintenance Change Requests (MCRs), and Emergency Change Requests (ECRs) for ICAM systems.
• Facilitate Test Deployment Planning (DP) and Production Deployment Planning (DP) meetings, ensuring deployment plans are reviewed, resources are available, and technical artifacts are validated.
• Schedule and coordinate Maintenance Windows (MWs) for system deployments, ensuring all required attendees are present and deployment plans are executed efficiently.
• Review deployment artifacts, update deployment plans during maintenance windows, and ensure rollback plans are in place.
• Use MS Teams to monitor deployment requests and facilitate communication between Scrum Masters, Product Owners, and technical teams.
• Ensure deployment calendars are updated regularly and align with client schedules.
• Provide internal communications to stakeholders, including system owners, regarding deployment status, completion, and any issues encountered.

Requirements

• Strong understanding of risk management principles, frameworks, and regulatory requirements.
• Comprehensive knowledge of ITIL processes, particularly Change Management, with certification preferred.
• Familiarity with the Software Development Lifecycle and operational environments within DHS ESSD ICAM.
• Advanced interpersonal skills to engage stakeholders across all levels of the organization, fostering collaboration and building credibility.
• Prominent ability to analyze complex issues, identify solutions, and negotiate resolutions in a dynamic environment.
• Excellent oral, written, and presentation skills, with the ability to adapt communication style to diverse audiences.
• Strong analytical and problem-solving skills, with experience in data-driven decision-making.
• Proficiency in Microsoft Office tools (Excel, Visio, PowerPoint) and knowledge-sharing platforms like SharePoint.
• Ability to work in rotational shifts and weekends as required.

Skills

• Bachelor’s degree in information technology, Business or other relevant discipline.
• At least 4-5 years of relevant consulting or industry experience.
• Ability to work in-person as needed.
• Experience in risk management, change management, or a related field, preferably within DHS or a federal agency.
• Experience working in a geographically dispersed and diverse team environment.
• Strong capabilities in communications and engagement strategy and delivery.
• The ability and willingness to work in excess of standard hours when necessary to support production deployments.

Qualifications

• Minimum of ITIL Change Management practitioner certification or equivalent experience.
• Advanced certifications in risk management or ITIL processes.

Benefits

Competitive compensation package based on performance and recognition of value.

Total rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

Flexible vacation policy allows you to decide how much vacation time you need based on your personal circumstances.

Designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.

Continuous learning opportunities provided through EY's collaborative working model.

Success as defined by you, with the flexibility to make a meaningful impact in your career.

Transformative leadership supported by EY's insights, coaching, and confidence to be the leader the world needs.

Opportunities to build a career as unique as you are, with the global scale, support, inclusive culture, and technology to become the best version of you.

Join us in our team-led and leader-enabled hybrid model, with most people in external, client serving roles expected to work together in person 40-60% of the time over the course of an engagement.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities.

EY | Building a better working world