Risk Manager

Trinzic; Colorado Springs (CO); On-site; USD 122,000 - 183,000; Full time

Job summary

KBR's National Security Solutions arm seeks a Risk Manager in Colorado Springs to lead risk management across DoD programs. You will steward risk, align RMF activities, and coordinate with cybersecurity teams to support ATO decisions and secure software delivery.

Ideal candidates have a strong background in Agile/DevSecOps, DoD policy, and RMF controls, with leadership and clear communication abilities to engage stakeholders at all levels.

Qualifications

• Education: BS/BA in Information Technology, Computer Science, or a related field (or equivalent experience) with 10+ years of experience.
• Active U.S. government TS/SCI security clearance, which only a U.S. citizen can obtain.
• Ability to obtain and maintain JWICS, SAP/SAR clearance.
• Proven experience in a similar role on programs.
• In-depth knowledge of project management methodologies and tools.
• Proficiency in risk management tools like ARM or Primavera Risk Analysis.

Responsibilities

• The Risk Manager will help steer Project Leadership through potential risks and opportunities, while equipping Program Management with historical context and highlighting emerging trends.
• Manage the project Risk Register in strict alignment with DoW RIO practices, ensuring every entry includes a clear articulation of probability, impact, mitigation plans, and ownership.
• Coordinate RMF-related risk activities with system owners, cybersecurity teams, AO representatives, and program leadership to support ATO/cATO/CtF documents and risk acceptance decisions for the software application.
• Synchronize with stakeholders to ensure alignment with project risk mandates and compliance standards.
• Assess cybersecurity and compliance risks related to NIST SP 800-53 controls, DoD STIGs, supply chain risk, and secure software development best practices.

Skills

Security clearance

Leadership

Communication

Risk management

Agile/DevSecOps

NIST SP 800-53

DoD policies

Project management

Jira/Confluence

GitLab

Education

BS/BA in IT/CS or related field

Tools

ARM

Primavera Risk Analysis

Job description

Risk Manager

At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results.

Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions.

Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact.

Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment.

Belong. Connect. Grow. with KBR!

KBR's National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities.

Our KBR team in Colorado Springs, CO is seeking a Risk Manager, and your contributions will directly impact the success of our projects and the overall business outcomes we aim to achieve.

Key Responsibilities

• The Risk Manager will help steer Project Leadership through potential risks and opportunities, while equipping Program Management with historical context and highlighting emerging trends.
• Manage the project Risk Register in strict alignment with DoW RIO practices, ensuring every entry includes a clear articulation of probability, impact, mitigation plans, and ownership.
• Coordinate RMF-related risk activities with system owners, cybersecurity teams, Authorizing Official (AO) representatives, and program leadership to support Authority to Operate (ATO), Continuous ATO (cATO), and Certificate to Field (CtF) documents and the ongoing risk acceptance decisions for the software application.
• Synchronize with key stakeholders, including clients, consultants, and regulatory bodies, to ensure seamless alignment with project risk mandates and compliance standards.
• Assess cybersecurity and compliance risks related to NIST SP 80053 security controls, DoD STIGs, supply chain risk, and secure software development best practices, escalating material risks to program leadership as appropriate.
• Embed risk management directly into the Agile and DevSecOps lifecycle by integrating risk reviews into Sprint and Program Increment (PI) planning. Ensure all mitigation strategies are prioritized within the product backlog and reflected in long-term technical roadmaps.
• Ensure alignment with DoD acquisition and software policies, including Software Acquisition Pathway (SWP) risk considerations and continuous risk monitoring expectations for modern software programs.

Work Environment

• Location: On Customer Site
• Travel Requirements: Minimal
• Working Hours: Flexible

Qualifications

Required:

• Security Clearance: Must possess an active U.S. government TS/SCI security clearance, which only a U.S. citizen can obtain
• Ability to obtain and maintain a JWICS, SAP/SAR clearance
• Education: BS/BA in Information Technology, Computer Science, or a related field (or equivalent experience) with 10+ years of experience
• DODM 8140.03 Cybersecurity Certification (CISSP, CISM, CCISO, etc)
• Proven experience in a similar role on programs
• In-depth knowledge of project management methodologies and tools
• Proficiency in project scheduling and resource management
• Proficiency in risk management tools like ARM or Primavera Risk Analysis
• Exceptional leadership and team management abilities
• Excellent communication and interpersonal skills to effectively engage with stakeholders at all levels
• Strong problem-solving and decision-making skills
• Ability to work under pressure and manage multiple priorities effectively
• A proactive approach to risk management and conflict resolution
• Working knowledge of Agile, Agile XP, DevOps, and DevSecOps methodologies
• Networking experience
• Experience working with version control systems like Gitlab, Jira and Confluence
• Strong problem-solving skills

Desired:

• Familiarity with DoD cybersecurity artifacts and tools, including RMF documentation, vulnerability findings, and compliance evidence used to support ATO or cATO decisions

Basic Compensation: $122,300 - $183,400 (Salary Range for Colorado Springs Only)

The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity.

Additional Compensation:

KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of a sign on bonus, relocation benefits, short-term incentives, long-term incentives, or discretionary payments for exceptional performance.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team's philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver - Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.