Risk Manager

Trinzic; Colorado Springs (CO); On-site; USD 122,000 - 183,000; Full time

Job summary

KBR’s National Security Solutions team in Colorado Springs seeks a Risk Manager to guide risk across programs, including RMF, ATO, and continuous risk monitoring. The role embeds risk reviews in Agile/DevSecOps delivery and collaborates with stakeholders to drive secure software development and governance.

Candidates should hold an active TS/SCI clearance, U.S. citizenship, and a BS/BA in a related field with 10+ years of experience.

Qualifications

• Active TS/SCI clearance required.
• U.S. citizen with ability to obtain JWICS, SAP/SAR clearance.
• BS/BA in Information Technology, Computer Science, or related field with 10+ years experience.
• DODM 8140.03 cybersecurity certification (CISSP, CISM, CCISO, etc).
• Proven experience in a similar role on DoD programs.

Responsibilities

• Steer project leadership through risks and opportunities with historical context and trend analysis.
• Manage the Risk Register with probability, impact, mitigation, and ownership.
• Coordinate RMF risk activities with system owners and cybersecurity teams to support ATO/cATO/CtF decisions.
• Align with clients, consultants, and regulatory bodies on risk mandates and compliance standards.
• Assess cybersecurity and compliance risks related to NIST SP 800-53 controls and DoD STIGs.
• Embed risk reviews into Agile/DevSecOps lifecycle and prioritise mitigations in the backlog.
• Ensure DoD acquisition and software policy alignment, including SWP risk considerations.

Skills

Leadership

Communication

Problem-solving

Agile/DevSecOps

Risk management

Project management

Stakeholder engagement

Education

BS/BA in IT/CS or related field

Tools

ARM

Primavera Risk Analysis

GitLab

Jira

Confluence

Job description

Title

Risk Manager

About the Role

At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results.

Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions.

Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact.

Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment.

Belong. Connect. Grow. with KBR!

KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities.

Our KBR team in Colorado Springs, CO is seeking a Risk Manager, and your contributions will directly impact the success of our projects and the overall business outcomes we aim to achieve.

Key Responsibilities

• The Risk Manager will help steer Project Leadership through potential risks and opportunities, while equipping Program Management with historical context and highlighting emerging trends.
• Manage the project Risk Register in strict alignment with DoW RIO practices, ensuring every entry includes a clear articulation of probability, impact, mitigation plans, and ownership.
• Coordinate RMF-related risk activities with system owners, cybersecurity teams, Authorizing Official (AO) representatives, and program leadership to support Authority to Operate (ATO), Continuous ATO (cATO), and Certificate to Field (CtF) documents and the ongoing risk acceptance decisions for the software application.
• Synchronize with key stakeholders, including clients, consultants, and regulatory bodies, to ensure seamless alignment with project risk mandates and compliance standards.
• Assess cybersecurity and compliance risks related to NIST SP 80053 security controls, DoD STIGs, supply chain risk, and secure software development best practices, escalating material risks to program leadership as appropriate.
• Embed risk management directly into the Agile and DevSecOps lifecycle by integrating risk reviews into Sprint and Program Increment (PI) planning. Ensure all mitigation strategies are prioritized within the product backlog and reflected in long-term technical roadmaps.
• Ensure alignment with DoD acquisition and software policies, including Software Acquisition Pathway (SWP) risk considerations and continuous risk monitoring expectations for modern software programs.

Work Environment

• Location: On Customer Site
• Travel Requirements: Minimal
• Working Hours: Flexible

Qualifications

Required

• Security Clearance: Must possess an active U.S. government TS/SCI security clearance, which only a U.S. citizen can obtain
• Ability to obtain and maintain a JWICS, SAP/SAR clearance
• Education: BS/BA in Information Technology, Computer Science, or a related field (or equivalent experience) with 10+ years of experience
• DODM 8140.03 Cybersecurity Certification (CISSP, CISM, CCISO, etc)
• Proven experience in a similar role on programs
• In-depth knowledge of project management methodologies and tools
• Proficiency in project scheduling and resource management
• Proficiency in risk management tools like ARM or Primavera Risk Analysis
• Exceptional leadership and team management abilities
• Excellent communication and interpersonal skills to effectively engage with stakeholders at all levels
• Strong problem-solving and decision-making skills
• Ability to work under pressure and manage multiple priorities effectively
• A proactive approach to risk management and conflict resolution
• Working knowledge of Agile, Agile XP, DevOps, and DevSecOps methodologies
• Networking experience
• Experience working with version control systems like Gitlab, Jira and Confluence
• Strong problem-solving skills

Desired

• Familiarity with DoD cybersecurity artifacts and tools, including RMF documentation, vulnerability findings, and compliance evidence used to support ATO or cATO decisions

Basic Compensation

$122,300 - $183,400 (Salary Range for Colorado Springs Only) The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity.

Additional Compensation

KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of a sign on bonus, relocation benefits, short-term incentives, long-term incentives, or discretionary payments for exceptional performance.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team's philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver - Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.