Information System Security Manager (ISSM)

Trinzic; Washington (District of Columbia); Remote; USD 120,000 - 150,000; Full time

Job summary

KBR Information System Security Manager (ISSM) role, primarily remote, with occasional access to DoD installations as needed. Responsible for RMF packages, executive briefings, and security documentation across programs.

Lead audits, remediation efforts, and reporting to SISO, PM, AO. Requires TS/SCI, 2+ years in IA or cybersecurity engineering, and SAP experience preferred. Remote work with travel ~25%.

Qualifications

• Bachelor’s degree in engineering, CS, or 8 years IT field experience in lieu of degree.
• Experience with RMF processes and security assessments.
• SAP experience or SAP environments preferred.

Responsibilities

• Deliver RMF documentation: executive briefings, assessments, self-assessments, RMF packages.
• Review ACAS/HBSS reports for reporting and compliance.
• Develop software certification packages and RMF artifacts.
• Interface with SISO, PM, and AO on RMF status and remediation plans.
• Lead security audits and compliance activities for each system.
• Monitor status updates and provide monthly executive reports and metrics.

Skills

RMF processes

Vulnerability reporting

Security documentation

Leadership

Education

Bachelor’s Degree in Engineering

8 years IT field experience in lieu of degree

Master’s Degree preferred

Tools

ACAS

HBSS

RMF tools

Job description

Title: Information System Security Manager (ISSM)

KBR is seeking an Information System Security Manager (ISSM) to join our team. This position is primarily remote, however the ISSM must be able to go into the DoD installation space for meetings and work on ad ad-hoc and sometimes immediate basis

Why Join Us?

• Innovative Projects: KBR’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.
• Collaborative Environment: Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.
• Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.

Responsibilities:

• Deliver documentation to include: Executive level briefings, Assessments, Self-Assessments, RMF packages, and supporting RMF documentation
• Review Cybersecurity tool reports, ACAS, HBSS, for the purposes of reporting and compliance
• Software Certification package development
• Work directly with the TRMC SISO on all TRMC RMF packages and ATO Status updates
• Support security engineering projects and solution delivery.
• Lead security audit and compliance activities for each system responsible for
• Responsible for auditing all artifacts provided in each RMF package to determine system readiness for ATO packet submissions.
• Provide recommendations to the SISO, PM, and AO regarding remediation and mitigation of identified vulnerabilities on test reports and plan of action and milestones (POA&Ms).
• Monitor system status updates and report to senior leadership.
• Includes monthly executive reports, vulnerability reports, JFHQ DODIN reporting and briefing.
• Monthly executive briefing to SISO, PM on security metrics
• Interface with PMs and SISO on issues needing input/concurrence
• Draft and present RMF deliverables to senior leadership
• Attending Executive Program Reviews as the ISSM
• Work with outside agencies on Memorandums of Understanding / Interconnection Service Agreements, and other senior level agreements etc.
• Work directly with a distributed team to reduce travel
• Travel 25% of time

Basic Qualifications:

• *TS/SCI required*
• A minimum of 2 years of Information Technology Information Assurance, or Cyber Security engineering experience.
• A minimum of 2 years of experience in conducting security assessments by reviewing security controls with the ISSO/ISSM and guide programs through RMF process.
• Bachelor’s Degree in Engineering, Computer Science, or 8 years IT field experience in lieu of degree; Master’s Degree preferred
• Experience working with Special Access Programs (SAP)