Cybersecurity Engineer - Change Management

Cybersecurity Engineer - Change Management

Description -

Cybersecurity Change Management – Role Overview

The Cybersecurity Change Management Analyst is responsible for governing, coordinating, and validating changes made to security‑critical infrastructure, including firewalls, servers, cloud workloads, security platforms, endpoints, and network systems.

The analyst should work closely with requestors, cyber teams and other stakeholders to ensures that all changes are assessed for risk, follow proper approval workflows, meet policy standards, and support stable, secure operation. This is a hands‑on process governance and coordination role ideal for someone with strong technical fundamentals and a passion for structured change control.

Key Responsibilities

1. Governance & Policy Oversight

• Good understanding of cybersecurity policy (e.g., Cybersecurity Policy Suite (CPS) Standards and Specifications) and the standards.

2. Change Management Execution

• Apply structured methodologies to lead change management activities across cybersecurity initiatives.

• As coordinator, should be able to represent in CAB (infrastructure/Application Change Approval/Advisory Board) for the changes related to technology.

• Change status reporting to respective stakeholders post the CAB meetings.

• Develop and maintain productive relationships with key engagement team contacts, i.e., Stakeholders and the Management.

• Conduct impact analyses, assess change readiness, and identify key stakeholders.

• Develop and implement strategies to maximize adoption and minimize resistance to cybersecurity changes.

• Exceptional communication skills, both written and verbal

3. Risk Management Integration

• Collaborate with risk liaisons and business units to ensure remediation plans are in place for critical and high risks.

• Track and report on remediation timelines using frameworks like ERD (Expected Remediation Date) and ERT (Expected Remediation Timeframe).

• Flag risks with dependencies and escalate where necessary to secure executive sponsorship.

4. Communication & Training

• Enable the design and delivery of communications and training programs to support change adoption.

• Coach senior leaders and managers to fulfil their roles as change sponsors.

5. Compliance & Audit Support

• Ensure changes align with regulatory requirements and internal standards (e.g., NIST, ISO 27001).

• Support audit readiness and documentation for risk closure, especially for tech debt-related risks.

Qualifications & Skills

• Bachelor's or master's degree in Cybersecurity, Information Systems, or related field.

• Certifications such as CISSP, CISM, PMP, or ITIL are highly desirable.

• 2+ Years Experience.

• Strong understanding of cybersecurity frameworks, risk analysis, and change management methodologies.

• Excellent communication, leadership, and stakeholder management skills.

Job -

Data & Information Technology

Schedule -

Full time

Shift -

No shift premium (India)

Travel -

No

Relocation -

NoEqual Opportunity Employer (EEO) - 

HP, Inc. provides equal employment opportunity to all employees and prospective employees, without regard to race, color, religion, sex, national origin, ancestry, citizenship, sexual orientation, age, disability, or status as a protected veteran, marital status, familial status, physical or mental disability, medical condition, pregnancy, genetic predisposition or carrier status, uniformed service status, political affiliation or any other characteristic protected by applicable national, federal, state, and local law(s).

Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence.

For more information, review HP’s EEO Policy or read about your rights as an applicant under the law here: “Know Your Rights: Workplace Discrimination is Illegal"