Human Cyber Risk Change Manager

$160,284 - $195,903/Yr

3M - Maplewood, MN

Full-time - Mid Level

Hybrid - Maplewood, MN

Nonmetallic Mineral Product Manufacturing

About the position

The Human Cyber Risk Change Manager at 3M is responsible for leading organizational change management initiatives focused on enhancing cybersecurity awareness and compliance. This role involves collaborating with diverse teams to design and implement strategies that foster behavioral and cultural change, ensuring alignment with industry best practices and regulatory requirements. The position emphasizes the importance of understanding human behavior in relation to cybersecurity and aims to improve the overall cybersecurity posture of the organization.

Responsibilities

• Apply structured change methodologies and lead change management activities tailored to cybersecurity awareness initiatives.
• Collaborate with subject matter experts (SMEs) and stakeholders to create a change management strategy that aligns with program objectives.
• Develop and implement a change adoption framework that demonstrates value and influences behavioral change.
• Conduct impact analyses, assess change readiness, and identify key stakeholders to establish clear objectives and timelines for change.
• Identify potential human-based risks and develop mitigation strategies to enhance cybersecurity posture.
• Conduct behavioral assessments and design intervention plans to promote secure behaviors among users.
• Monitor and evaluate program effectiveness, gathering feedback and making necessary adjustments to improve the Human Cyber Risk Management (HCRM) program.
• Leverage risk scores and data analytics to gain insights into user behavior and track progress for continuous improvement.
• Ensure change initiatives align with strategic objectives, compliance, and industry standards.
• Manage the change portfolio, providing project management support and leading a team of behavior and data analysts.

Requirements

• Bachelor's degree or higher from an accredited university with four years of experience in organizational change management, or a high school diploma/GED with eight years of experience in the same field.
• Experience in cybersecurity awareness and understanding of risk mitigation principles, theories, techniques, and best practices.
• Proficiency in change management models such as ADKAR and certifications like Prosci, CCMP, SSAP, SACP, or CSAP are preferred.
• Experience in conducting employee surveys and exploring workplace culture and processes.
• Strong analytical skills and comfort with data to improve impact.
• Ability to communicate complex technical messages in an understandable manner.
• Familiarity with project management tools and ability to manage multiple priorities.

Nice-to-haves

• Master's degree in Business Administration, Human Resources, Organizational Behavior, or related fields.
• Three years of experience in cybersecurity awareness.
• Experience working in a large global, multicultural organization.

Benefits

• Medical, Dental & Vision insurance
• Health Savings Accounts
• Flexible Spending Accounts for healthcare and dependent care
• Disability Benefits
• Life Insurance
• Voluntary Benefits
• Paid Absences
• Retirement Benefits