Cybersecurity Service & Change Management Lead

About the role

The Cybersecurity Service & Change Management Lead will drive excellence in service delivery and change control across 3M's Cybersecurity organization. This role bridges Cybersecurity and Enterprise IT Change Management, ensuring transparent, compliant, and low‑disruption implementation of security initiatives.

Key responsibilities

• Design, publish, and continuously improve the Cybersecurity service catalog, including versioning, approval workflows, and stakeholder communication.
• Coordinate service owners to keep service management tools aligned with the catalog for accurate request routing and reporting.
• Develop and maintain service management artifacts and process flows, adhering to ITIL best practices and audit requirements.
• Lead process‑mapping and optimization workshops across Cybersecurity functions.
• Design, document, and refine the Cybersecurity change management process, aligning with ITIL, ISO 27001, and NIST CSF.
• Define approval workflows, SLAs, quality gates, and evidence requirements for change requests.
• Facilitate and chair the Cybersecurity Change Advisory Board (CAB), ensuring proper risk assessment and compliance.

Required profile

• Proven experience in cybersecurity service management and change management.
• Familiarity with ITIL, ISO 27001, and NIST Cybersecurity Framework.
• Ability to work cross‑functionally with service owners and IT teams.
• Strong analytical and documentation skills, with a focus on continuous improvement.

Required skills

• ITIL
• ISO 27001
• NIST Cybersecurity Framework
• Service catalog management
• Change management processes
• Process mapping
• Version control