Information System Security Manager (ISSM)

KBR Careers; Huntsville (AL); On-site; USD 145,000 - 190,000; Full time

Benefits offered by this job

401K plan with company match

Medical, dental, vision

Job summary

KBR is seeking an Information System Security Manager (ISSM) to join our team. This role is primarily remote, with the ISSM required to visit DoD installation spaces for meetings and ad-hoc work as needed.

The ISSM will provide RMF support to TRMC systems, lead ISSOs, and liaise among end users, developers, and senior DoD leadership. Expect 25% travel and collaboration with military and contractor teams.

Qualifications

• TS/SCI security clearance required.
• Minimum 2 years IT IA or Cyber Security engineering experience.
• Minimum 2 years of experience in conducting security assessments with ISSO/ISSM and RMF processes.
• Bachelor’s Degree in Engineering, Computer Science, or 8 years IT field experience in lieu of degree; Master’s Degree preferred.
• Experience working with Special Access Programs (SAP).
• Proven expertise with assessing security controls per NIST SP 800-series.
• Experience with NIST 800-53, Security Development.
• Familiarity with assessments for Unclassified and Classified environments.
• Ability to interface with senior leadership and adapt to changes.
• Excellent oral and written communication skills.

Responsibilities

• Deliver RMF documentation including executive briefings, assessments, self-assessments, RMF packages and supporting RMF documentation.
• Review Cybersecurity tool reports (ACAS, HBSS) for reporting and compliance.
• Develop Software Certification packages.
• Collaborate with TRMC SISO on RMF packages and ATO status updates.
• Support security engineering projects and solution delivery.
• Lead security audit and compliance activities for assigned systems.
• Audit all RMF artifacts to determine readiness for ATO submissions.
• Provide remediation recommendations to SISO, PM, and AO for POA&Ms.
• Monitor system status updates and report to senior leadership.
• Prepare monthly executive reports and vulnerability reports.
• Present RMF deliverables to senior leadership; attend Executive Program Reviews as ISSM.
• Interface with PMs and SISO on issues requiring input.
• Engage with outside agencies on MOUs and Interconnection Service Agreements.

Skills

TS/SCI

RMF knowledge

Security assessments

DoD policy

Education

Bachelor’s degree or higher

Master’s degree preferred

Tools

ACAS

HBSS

Job description

Information System Security Manager (ISSM)

KBR is seeking an Information System Security Manager (ISSM) to join our team. This position is primarily remote, however the ISSM must be able to go into the DoD installation space for meetings and work on ad ad-hoc and sometimes immediate basis

Why Join Us?

• Innovative Projects: KBR’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.
• Collaborative Environment: Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.
• Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.

The selected applicant will provide cybersecurity and Risk Management Framework (RMF) support to systems and applications for the Test Resource Management Center (TRMC). Will work with military, government, and contractor personnel to provide technical and policy direction grounded in Department of Defense (DoD) policy, and act as the Subject Matter Expert (SME) with the cybersecurity domain and lead ISSOs. The application will, at times, be the liaison between end users, application developers, and senior leadership within the DoD and across the Test and Evaluation community.

Responsibilities

• Deliver documentation to include: Executive level briefings, Assessments, Self-Assessments, RMF packages, and supporting RMF documentation
• Review Cybersecurity tool reports, ACAS, HBSS, for the purposes of reporting and compliance
• Software Certification package development
• Work directly with the TRMC SISO on all TRMC RMF packages and ATO Status updates
• Support security engineering projects and solution delivery.
• Lead security audit and compliance activities for each system responsible for
• Responsible for auditing all artifacts provided in each RMF package to determine system readiness for ATO packet submissions.
• Provide recommendations to the SISO, PM, and AO regarding remediation and mitigation of identified vulnerabilities on test reports and plan of action and milestones (POA&Ms).
• Monitor system status updates and report to senior leadership.
• Includes monthly executive reports, vulnerability reports, JFHQ DODIN reporting and briefing.
• Monthly executive briefing to SISO, PM on security metrics
• Interface with PMs and SISO on issues needing input/concurrence
• Draft and present RMF deliverables to senior leadership
• Attending Executive Program Reviews as the ISSM
• Work with outside agencies on Memorandums of Understanding / Interconnection Service Agreements, and other senior level agreements etc.
• Work directly with a distributed team to reduce travel
• Travel 25% of time

Basic Qualifications

• *TS/SCI required*
• A minimum of 2 years of Information Technology Information Assurance, or Cyber Security engineering experience.
• A minimum of 2 years of experience in conducting security assessments by reviewing security controls with the ISSO/ISSM and guide programs through RMF process.
• Bachelor’s Degree in Engineering, Computer Science, or 8 years IT field experience in lieu of degree; Master’s Degree preferred
• Experience working with Special Access Programs (SAP)
• Proven expertise with assessing security controls in accordance with NIST Special Publications (i.e.: NIST 800 Series)
• Proven in-depth knowledge of Cybersecurity principles technologies, and processes.
• Experience with NIST 800-53, Security Development
• Familiarity with performing assessments for Unclassified and Classified environments
• Ability to adapt to process changes
• Ability to interface with senior leadership
• Ability to support high visibility or high priority projects
• Possession of excellent oral and written communication skills

Basic Compensation

• $155,000 - $190,000 (For DC area Only)
• $155.000 - $190,000 (For Point Mugu, California Only)
• $145,000 - $185,000 (For Maryland only)

The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity.

Additional Compensation

KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short-term incentives, long-term incentives, or discretionary payments for exceptional performance.

KBR Benefits

KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

R2129466