Information System Security Manager (ISSM)

KBR Careers; El Segundo (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

KBR is seeking an Information System Security Manager (ISSM) in El Segundo, CA to lead A&A and RMF activities, develop security plans and artifacts, and ensure compliance with NIST, DoD, and IC requirements.

The role requires 5+ years of ISSM/ISSO experience in classified environments, a TS clearance with SCI eligibility, and a DoD 8570-compliant certification. You will collaborate with engineers, admins, and leadership to maintain secure operations.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field
• Active DoD Top Secret clearance with SCI eligibility
• DoD 8570-compliant certification
• 5+ years of ISSM/ISSO experience in classified environments
• Experience supporting RMF authorization and compliance activities

Responsibilities

• Serve as onsite representative of Information Assurance Operations and provide subject matter expertise on cybersecurity.
• Conduct risk and vulnerability assessments to identify security risks and protection requirements.
• Lead and participate in A&A and RMF meetings with government and contractor personnel.
• Support development and implementation of cybersecurity policies, procedures, and process improvements.
• Develop, review, and maintain RMF documentation, including Security Plans, Risk Assessments, and POA&Ms.
• Assess system compliance with NIST, DoD, and IC security requirements, including NIST SP 800-53, 800-171, and DISA STIGs/SRGs.
• Coordinate with system admins, engineers, developers to support authorization efforts and maintain security documentation.
• Analyze vulnerability scan results and assist remediation to maintain compliance and reduce risk.
• Provide regular status updates and brief leadership on authorization activities.
• Maintain awareness of evolving cybersecurity standards and RMF guidance and apply updates.

Skills

A&A processes

RMF requirements

Security documentation

NIST standards

Communication skills

Leadership

Education

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field

Active DoD Top Secret clearance with SCI eligibility

DoD 8570-compliant certification

Tools

eMASS

ACAS

Xacta

SCAP Compliance Checker

Job description

Title

Information System Security Manager (ISSM)

About The Role

KBR is seeking an Information System Security Manager (ISSM) to support Assessment & Authorization (A&A) activities and cybersecurity policy and procedure development under the Information Assurance organization. This position is responsible for helping obtain and maintain Authorizations to Operate (ATOs) for assigned systems, applications, networks, and devices. Based in El Segundo, California, the ISSM reports directly to the West Regional ISSM and supports the development, implementation, and enforcement of cybersecurity practices across assigned systems and locations.

Key Responsibilities

• Serve as the onsite representative of the Information Assurance Operations organization and provide subject matter expertise on cybersecurity and information assurance activities.
• Conduct risk and vulnerability assessments to identify security risks, vulnerabilities, and protection requirements.
• Lead and participate in Assessment & Authorization (A&A) and Risk Management Framework (RMF) meetings with government and contractor personnel.
• Support the development and implementation of cybersecurity policies, procedures, and process improvements.
• Develop, review, and maintain RMF documentation, including Security Plans, Risk Assessment Reports, and Plans of Action & Milestones (POA&Ms).
• Assess system compliance with applicable NIST, DoD, and Intelligence Community security requirements, including NIST SP 800-53, NIST SP 800-171, and DISA STIGs and SRGs.
• Coordinate with system administrators, engineers, developers, and other stakeholders to support authorization efforts and maintain required security documentation.
• Analyze vulnerability scan results and assist with remediation activities to maintain compliance and reduce cybersecurity risk.
• Provide regular status updates, brief stakeholders on authorization activities, and prepare reports for leadership.
• Maintain awareness of evolving cybersecurity standards, RMF guidance, and security requirements and apply updates to assigned systems and processes.

Basic Qualifications

Education & Experience

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field; or equivalent combination of education and experience.
• Active DoD Top Secret security clearance with SCI eligibility.
• Current DoD 8570-compliant certification.
• 5+ years of experience performing ISSM and/or ISSO responsibilities in classified environments.
• Experience supporting Risk Management Framework (RMF) authorization and compliance activities.

Technical & Leadership Skills

• Knowledge of Assessment & Authorization (A&A) processes and RMF requirements.
• Experience developing RMF artifacts, including Security Plans, Risk Assessments, and POA&Ms.
• Familiarity with cybersecurity compliance tools such as eMASS, ACAS, Xacta, and SCAP Compliance Checker.
• Working knowledge of NIST security standards and DISA STIGs.
• Strong organizational, analytical, and problem-solving skills.
• Excellent written and verbal communication skills with the ability to collaborate across technical and non-technical teams.

Preferred Qualifications

• Experience supporting Department of Defense or Intelligence Community programs.
• Experience working within multi-enclave or classified network environments.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver - Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

R2128728