Government and Public Sector - Cybersecurity Risk and Change Management Senior Consultant

EY•McLean, VA

3d•$104,800 - $218,500•Hybrid

About The Position

The Risk and Change Management Senior Consultant is responsible for providing expert risk management and change management services to ensure alignment with organizational objectives, regulatory compliance, and operational excellence. This hybrid role combines strategic risk oversight with operational change management, enabling seamless transitions and mitigating risks associated with deployments, new initiatives, and system enhancements. You’ll act as a trusted advisor, collaborating across teams to identify risks, optimize processes, and ensure adherence to established frameworks and standards.

Requirements

Bachelor’s degree in information technology, Business or other relevant discipline
At least 4-5 years of relevant consulting or industry experience
Experience in risk management, change management, or a related field, preferably within DHS or a federal agency.
Experience working in a geographically dispersed and diverse team environment.
Strong capabilities in communications and engagement strategy and delivery
Knowledge of hybrid workforce strategy
The ability and willingness to work in excess of standard hours when necessary to support production deployments
Strong understanding of risk management principles, frameworks, and regulatory requirements
Comprehensive knowledge of ITIL processes, particularly Change Management, with certification preferred.
Familiarity with the Software Development Lifecycle and operational environments within DHS ESSD ICAM.
Advanced interpersonal skills to engage stakeholders across all levels of the organization, fostering collaboration and building credibility.
Proven ability to analyze complex issues, identify solutions, and negotiate resolutions in a dynamic environment.
Excellent oral, written, and presentation skills, with the ability to adapt communication style to diverse audiences.
Strong analytical and problem-solving skills, with experience in data-driven decision-making.
Proficiency in Microsoft Office tools (Excel, Visio, PowerPoint) and knowledge-sharing platforms like SharePoint.
Ability to work in rotational shifts and weekends as required.

Nice To Haves

Supervisory experience or project management experience
Minimum of ITIL Change Management practitioner certification or equivalent experience
Advanced certifications in risk management or ITIL processes

Responsibilities

Manage the ESSD ICAM Risk Register, ensuring risks are reviewed, analyzed, and updated regularly in Maestro JIRA.
Facilitate weekly Risk Review meetings to assess risks with statuses such as "Identified," "Assigned," "Analyzed," "Monitoring," and "Escalated."
Analyze new risks, add treatment and contingency plans, set priority levels, and assign risks to appropriate team members.
Monitor risks with upcoming or past expiration dates, ensuring timely updates and mitigation strategies.
Provide expert guidance on risk mitigation strategies, ensuring alignment with ICAM objectives and compliance with client regulatory requirements.
Collaborate with stakeholders to identify potential risks in deployments, system changes, and enhancements, optimizing process efficiency and designing effective controls.
Act as a thought leader in risk management, building credibility and fostering strong relationships across teams.
Coordinate and facilitate weekly Change Review Board (CRB) meetings, ensuring all Change Requests (CRs) are reviewed, prioritized, and assigned appropriately.
Review CRs with statuses such as "Ready for CRB" and "Submitted," ensuring proper categorization and readiness for review.
Update CR tickets in Maestro JIRA with comments, priority levels, sprint team assignments, and relevant dependencies.
Ensure compliance with ITIL best practices and client change management standards.
Monitor and maintain change records in the ITSM Service Management tool to comply with SLAs/KPIs and organizational processes.
Conduct Post Implementation Reviews (PIRs) for failed or emergency changes, identifying root causes and recommending improvements.
Manage Deployment Change Requests (DCRs), micro Deployment Change Requests (mDCRs), Maintenance Change Requests (MCRs), and Emergency Change Requests (ECRs) for ICAM systems.
Facilitate Test Deployment Planning (DP) and Production Deployment Planning (DP) meetings, ensuring deployment plans are reviewed, resources are available, and technical artifacts are validated.
Schedule and coordinate Maintenance Windows (MWs) for system deployments, ensuring all required attendees are present and deployment plans are executed efficiently.
Review deployment artifacts, update deployment plans during maintenance windows, and ensure rollback plans are in place.
Use MS Teams to monitor deployment requests and facilitate communication between Scrum Masters, Product Owners, and technical teams.
Ensure deployment calendars are updated regularly and align with client schedules.
Provide internal communications to stakeholders, including system owners, regarding deployment status, completion, and any issues encountered.