Organizational Change Management Lead - Application Security

Serve as the lead OCM specialist for an enterprise-wide initiative in Information Security and Risk Management (ISRM) within BTS, focused on embedding secure coding practices from the outset of software and application development. This role is integral to delivering on the 2025/2026 Cybersecurity Roadmap, enhancing organizational security posture and cyber hygiene. The OCM lead will partner closely with developers, business stakeholders, and cross-functional teams to ensure seamless adoption and sustainment of secure software development practices.

Major Responsibilities: · Conduct change impact assessments to identify areas affected by the integration of secure coding standards. · Lead stakeholder analysis, mapping, and engagement activities to ensure all impacted groups are identified, informed, and aligned. · Develop and implement a multi-channel communications strategy to drive awareness, understanding, and buy-in. · Collaborate with the Awareness & Training team to design and deploy targeted learning strategies and materials for developers and business partners. · Assess organizational readiness to adopt secure coding practices and recommend interventions to address any gaps. · Measure and report on adoption rates, resistance points, and overall initiative progress using defined success metrics. · Design and execute a sustainment plan to ensure secure coding becomes a consistent part of business-as-usual (BAU) operations. · Serve as a key advisor and change competency advocate, keeping leadership and stakeholders informed of risks, challenges, and achievements.

List required and preferred qualifications (up to 10). Include education, skills and experience. · Expertise in change management methodologies, tools, and principles · Change management certification required (Prosci is preferred) · Experience and proven success leading change initiatives, implementing technology/process changes for developer, technical or cybersecurity teams · Skilled in stakeholder engagement, collaboration across all organizational levels, including IT, business, and cybersecurity functions · Strong communication, facilitation, and user experience strategies, as well as developing enterprise communications, coaching, and training · Ability to design and refine change strategies to drive adoption, including developing training programs and measuring OCM adoption metrics · Familiarity with project management practices and tools · Availability to start before year end and commit through 2026