Cybersecurity Controls Change Manager

Responsibilities: Develop and own the change strategy and plan forcontrols and at the enterprise program level, including stakeholder analysis, impact assessments, and readiness. Lead communications and engagement planning: audience segmentation, key messages, channels, and cadence for executives, managers, and employees. Sequence and coordinate change releases with the Project Manager to manage change load and avoid fatigue across teams. Design and deliver training, job aids, and adoption plans that translate controls into operational practices. Establish change governance, including change networks or champions, feedback loops, and escalation paths. Measure adoption and effectiveness using KPIs, surveys, frontline testing, and feedback; adjust approach based on results. Identify and mitigate resistance and adoption risks; partner with leaders to reinforce sustained behavior change. Work with the Business Systems Analyst to translate requirements and process changes into impact assessments. Report change status and adoption metrics to program leadership and steering committees.

Qualifications: 7+ years of change management experience leading large-scale organizational change, ideally in cybersecurity or technology transformation. Demonstrated experience with enterprise identity modernization, AI governance, or secure technology adoption. Strong stakeholder engagement, executive communication, and change governance skills. Experience translating security controls and regulatory requirements into employee adoption plans and operational practices. Experience measuring adoption through dashboards, KPIs, and frontline testing. Proficiency with a recognized change methodology (Prosci, ADKAR, Kotter, or equivalent).Strong writing, facilitation, and presentation skills.

Preferred Skills: Prosci certification or equivalent. Technical familiarity with IAM, PAM, Zero Trust, and cloud security concepts. Understanding of compliance frameworks (NIST, ISO 27001, HIPAA, SOC 2, PCI-DSS).Experience in a global or geographically distributed organization.