Information System Security Manager (ISSM)

KBR, Inc; El Segundo (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

KBR in El Segundo, California is seeking an Information System Security Manager (ISSM) to support A&A activities and policy development under the Information Assurance organization. This role is responsible for obtaining and maintaining Authorizations to Operate for systems, applications, networks, and devices.

Based in sunny El Segundo, the ISSM will coordinate RMF artifacts, assess compliance with NIST and DISA guidance, and lead risk assessments with government and contractor teams while

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• Active DoD Top Secret with SCI eligibility.
• 5+ years ISSM/ISSO in classified environments.
• Experience supporting RMF authorization and compliance activities.

Responsibilities

• Serve as onsite representative for information assurance activities.
• Conduct risk and vulnerability assessments.
• Lead RMF/A&A meetings with government and contractor personnel.
• Develop and enforce cybersecurity policies and procedures.
• Maintain RMF documentation like Security Plans and POA&Ms.
• Assess compliance with NIST, DoD, and ICD requirements.
• Coordinate with admins, engineers and developers to support authorization.
• Analyze vulnerability scans and assist remediation.
• Provide status updates and reports for leadership.
• Stay aware of evolving cybersecurity standards.

Skills

RMF processes

A&A coordination

NIST SP 800-53

Vulnerability assessment

Communication skills

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field

Tools

eMASS

ACAS

Xacta

SCAP Compliance Checker

DISA STIGs

Job description

Title: Information System Security Manager (ISSM)

We are KBR

At KBR, we partner with clients to provide purposeful and comprehensive science, technology and engineering solutions to governments as well as the top tier commercial clients in green hydrogen and green ammonia. With a full portfolio of services, proprietary technologies and expertise, our approximately 37,000 employees are ready to handle projects and missions throughout their entire lifecycle, from planning and design to sustainability and maintenance. Whether at the bottom of the ocean or in outer space, our clients trust us to deliver the impossible on a daily basis. As the needs of the world change, we're ready to respond and guide the way forward with strategic, sustainable, and technological advancements grounded in more than a century of practical application and execution.

About the Role

KBR is seeking an Information System Security Manager (ISSM) to support Assessment & Authorization (A&A) activities and cybersecurity policy and procedure development under the Information Assurance organization. This position is responsible for helping obtain and maintain Authorizations to Operate (ATOs) for assigned systems, applications, networks, and devices. Based in El Segundo, California, the ISSM reports directly to the West Regional ISSM and supports the development, implementation, and enforcement of cybersecurity practices across assigned systems and locations.

Key Responsibilities

• Serve as the onsite representative of the Information Assurance Operations organization and provide subject matter expertise on cybersecurity and information assurance activities.
• Conduct risk and vulnerability assessments to identify security risks, vulnerabilities, and protection requirements.
• Lead and participate in Assessment & Authorization (A&A) and Risk Management Framework (RMF) meetings with government and contractor personnel.
• Support the development and implementation of cybersecurity policies, procedures, and process improvements.
• Develop, review, and maintain RMF documentation, including Security Plans, Risk Assessment Reports, and Plans of Action & Milestones (POA&Ms).
• Assess system compliance with applicable NIST, DoD, and Intelligence Community security requirements, including NIST SP 800-53, NIST SP 800-171, and DISA STIGs and SRGs.
• Coordinate with system administrators, engineers, developers, and other stakeholders to support authorization efforts and maintain required security documentation.
• Analyze vulnerability scan results and assist with remediation activities to maintain compliance and reduce cybersecurity risk.
• Provide regular status updates, brief stakeholders on authorization activities, and prepare reports for leadership.
• Maintain awareness of evolving cybersecurity standards, RMF guidance, and security requirements and apply updates to assigned systems and processes.

Basic Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field; or equivalent combination of education and experience.
• Active DoD Top Secret security clearance with SCI eligibility.
• Current DoD 8570-compliant certification.
• 5+ years of experience performing ISSM and/or ISSO responsibilities in classified environments.
• Experience supporting Risk Management Framework (RMF) authorization and compliance activities.

Technical & Leadership Skills

• Knowledge of Assessment & Authorization (A&A) processes and RMF requirements.
• Experience developing RMF artifacts, including Security Plans, Risk Assessments, and POA&Ms.
• Familiarity with cybersecurity compliance tools such as eMASS, ACAS, Xacta, and SCAP Compliance Checker.
• Working knowledge of NIST security standards and DISA STIGs.
• Strong organizational, analytical, and problem-solving skills.
• Excellent written and verbal communication skills with the ability to collaborate across technical and non-technical teams.

Preferred Qualifications

• Experience supporting Department of Defense or Intelligence Community programs.
• Experience working within multi-enclave or classified network environments.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team's philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver - Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

KBR - Delivering Solutions, Changing the World.

KBR brings together the best and brightest to deliver science, technology and engineering solutions that help governments and companies around the world accomplish their most critical missions and objectives. In everything we do, we are guided by our ONE KBR Values: We Value Our People - We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential. We Deliver - We are uncompromising in our commitment to deliver innovative, high-quality technology-led solutions for our customers and exceptional, sustainable value for all our stakeholders. We Are People of Integrity - We value honesty, trust, courage, fairness, prudence and tenacity. We believe doing what's right for the planet, the communities where we work, and our people is good for business. We Empower - We empower our people with a shared purpose, the right tools and the supportive culture they need to be proactive decision-makers, to be adaptive to change, and to succeed. We Are a Team of Teams - We have a will to succeed, but we value the achievements of our team of teams over individual accomplishments. Our collective focus makes us a better, stronger, more effective company.

We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function. Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals.

Worldwide, KBR employs a diverse workforce approximately 29,000 people strong, with customers in more than 80 countries and operations in 40 countries. At KBR, We Deliver.