Cybersecurity Service and Change Management Lead

3M; Minnesota; On-site; USD 164,612 - 201,193; Full time

Job summary

3M seeks a Cybersecurity Service and Change Management Lead to design, implement and continually improve the cybersecurity service catalog and change framework. You will coordinate between cybersecurity and enterprise IT Change Management, ensuring minimal business disruption with transparent, auditable processes.

Lead CAB meetings, enforce ITIL/ISO controls, manage risk, and drive standardization across global teams while aligning with enterprise IT change calendars and governance.

Qualifications

• Bachelor’s degree in information systems, cybersecurity or related field.
• Minimum 7 years in cybersecurity, IT service or change/release management.
• Familiar with ITIL, NIST CSF and ISO/IEC 27001 frameworks.

Responsibilities

• Design, implement and improve cybersecurity service catalog and change management framework.
• Lead IT change management processes, including CAB sessions and risk analysis.
• Coordinate with global teams to ensure compliant, controlled delivery of initiatives.
• Enforce SLAs, evidence requirements, testing and rollback plans.
• Champion changes at Tier 4 IT CAB and ensure audit-ready records.

Skills

ITIL Change Enablement

CAB leadership

Cybersecurity knowledge

Education

Bachelor’s degree in Information Systems

Tools

GRC tools

Job description

Job Description

Cybersecurity Service and Change Management Lead

Collaborate with Innovative 3Mers Around the World

Choosing where to start and grow your career has a major impact on your professional and personal life, so it’s equally important you know that the company that you choose to work at, and its leaders, will support and guide you. With a wide variety of people, global locations, technologies and products, 3M is a place where you can collaborate with other curious, creative 3Mers.

The Impact You’ll Make in this Role

At 3M, You Will Drive Service And Change Management Excellence Within The Cybersecurity Organization. As The Cybersecurity Service And Change Management Lead, You Will Design, Implement, And Continuously Improve The Cybersecurity Service Catalog, Service Management Processes, And Change Management Framework To Ensure Efficient, Compliant, And Controlled Delivery Of Cybersecurity Initiatives. You Will Serve As The Primary Liaison Between Cybersecurity And Enterprise IT Change Management, Enabling Transparency, Quality, And Minimal Business Disruption. Here, You Will Make An Impact By

• Develop and maintain the Cybersecurity service catalog.
• Establish and maintain process for catalog changes, including review, and approval, versioning and changelog.
• Coordinate service owners to update and maintain service management tools in alignment with service catalogue to enable accurate request routing, reporting, and portfolio visibility.
• Publish and socialize the catalog to improve discoverability and adoption; capture feedback for continuous improvement.

• Coordinate Cybersecurity teams to develop, maintain, and update key service management artifacts and process flows.
• Advise and support on service management artifacts as needed, aligning with ITIL practices and audit/compliance requirements.
• Facilitate process-mapping and optimization workshops across Cybersecurity functions.
• Ensure document quality, version control, and centralized accessibility; drive standardization across teams.

• Design, document, and continuously improve the Cybersecurity change management process aligned to ITIL/ISO 27001/NIST CSF and the IT change management process.
• Define approval workflows, SLAs, quality gates, and evidence requirements.
• Align Cybersecurity change requests to defined IT change categories and risk tiers.
• Ensure alignment to enterprise IT change calendar, blackout/maintenance windows, and change freeze protocols.
• Enforce pre-implementation requirements (testing, rollback/back-out plans, segregation of duties, peer reviews, impact analysis).

• Plan, facilitate, and chair Cybersecurity CAB meetings (Tiers 1–3) to ensure quorum, risk review, approval, and timely decision-making.
• Maintain agendas, minutes, action items, and audit-ready records for all change approval activities.
• Coordinate emergency change processes and ensure controlled handling, with proper post-implementation review and documentation.

• Understand and enforce criteria for Tier 4 Cybersecurity changes.
• Drive risk assessment, impact analysis and executive-level approvals for Tier 4 changes; ensure cross-functional sign-offs.
• Orchestrate readiness reviews, test plans, back-out strategies, and stakeholder communications for Tier 4 changes.
• Present and champion Cybersecurity changes at the Tier 4 IT CAB.

• Review change requests for completeness, risk rating, operational impact, and required artifacts (test evidence, rollback plan, approver list).
• Enforce process requirements, SLAs, and quality standards; reject or remediate inadequate change requests.
• Monitor adherence to segregation of duties, least privilege, and production access controls during change execution.
• Lead post-implementation reviews (PIRs) and root-cause analysis of failed changes.

• Act as Cybersecurity POC for enterprise IT Change Management.
• Harmonize change processes across Cybersecurity domains.
• Drive alignment with IT definitions for standard/normal/emergency changes and integrate with IT release management, incident, and problem management.

Your Skills And Expertise

To set you up for success in this role from day one, 3M requires (at a minimum) the following qualifications:

• Bachelor’s degree in Information Systems, Cybersecurity, Computer Science, Business or technology field (completed and verified prior to start)
• Seven (7) years of experience in Cybersecurity, IT Service Management, or Change/Release Management in a private, public, government or military environment

Additional qualifications that could help you succeed even further in this role include:

• Deep knowledge of ITIL Change Enablement, Service Management, NIST CSF, and ISO/IEC 27001 frameworks
• Experience managing enterprise change and service management processes including CAB leadership and service catalog development
• Proficiency with enterprise change, workflow, and GRC tools
• Strong understanding of cybersecurity domains such as IAM, network/cloud security, SIEM/SOAR, and vulnerability management
• Proven ability to assess risk, manage stakeholder communication, and coordinate complex, high-impact changes across global teams
• ITIL4ManagingProfessional or ChangeEnablement certification
• Cybersecurity certification such as CISSP or CISM
• PMP, PRINCE2, or Prosci certification (nice to have)

Work Location

• Work location: This role follows an on-site working model, requiring the employee to work at least four days a week at the 3M Center in Maplewood, MN or Austin, Tx.

Travel

May include up to 5% domestic

Relocation

May be authorized

Must be legally authorized to work in country of employment without sponsorship for employment visa status (e.g., H1B status).

Supporting Your Well-being

3M offers many programs to help you live your best life – both physically and financially. To ensure competitive pay and benefits, 3M regularly benchmarks with other companies that are comparable in size and scope.

Applicable to US Applicants Only: The expected compensation range for this position is $164,612 - $201,193, which includes base pay plus variable incentive pay, if eligible. This range represents a good faith estimate for this position. The specific compensation offered to a candidate may vary based on factors including, but not limited to, the candidate’s relevant knowledge, training, skills, work location, and/or experience. In addition, this position may be eligible for a range of benefits (e.g., Medical, Dental & Vision, Health Savings Accounts, Health Care & Dependent Care Flexible Spending Accounts, Disability Benefits, Life Insurance, Voluntary Benefits, Paid Absences and Retirement Benefits, etc.). Additional information is available at: https://www.3m.com/3M/en_US/careers-us/working-at-3m/benefits/.

All US-based 3M full time employees will need to sign an employee agreement as a condition of employment with 3M. This agreement lays out key terms on using 3M Confidential Information and Trade Secrets. It also has provisions discussing conflicts of interest and how inventions are assigned. Employees that are Job Grade 7 or equivalent and above may also have obligations to not compete against 3M or solicit its employees or customers, both during their employment, and for a period after they leave 3M.

Responsibilities of this position include that corporate policies, procedures and security standards are complied with while performing assigned duties.

Safety is a core value at 3M. All employees are expected to contribute to a strong Environmental Health and Safety (EHS) culture by following safety policies, identifying hazards, and engaging in continuous improvement.

Pay & Benefits Overview: https://www.3m.com/3M/en_US/careers-us/working-at-3m/benefits/

3M does not discriminate in hiring or employment on the basis of race, color, sex, national origin, religion, age, disability, veteran status, or any other characteristic protected by applicable law.