Risk Manager

KBR; Colorado Springs (CO); On-site; USD 122,000 - 183,000; Full time

Job summary

KBR's National Security Solutions team in Colorado Springs, CO is seeking a Risk Manager to guide risk activities across programs and ensure alignment with DoD policies and RMF requirements.

Responsibilities include managing the Risk Register, coordinating with system owners and cybersecurity teams, and embedding risk reviews into Agile/DevSecOps lifecycles to support ATO/cATO decisions and secure software delivery.

Qualifications

• Active TS/SCI clearance required for role.
• BS/BA in Information Technology, Computer Science or related field; 10+ years experience.
• DODM 8140.03 Cybersecurity Certification (CISSP, CISM, CCISO) required.
• Proven experience in project management methodologies and tools.
• Proficiency in risk management and scheduling tools (ARM, Primavera).
• Strong leadership, communication and stakeholder engagement skills.
• Familiarity with Agile, DevSecOps, RMF processes and DoD policies.

Responsibilities

• Steer project leadership through risks and opportunities.
• Maintain the Risk Register with probability, impact, mitigation and ownership.
• Coordinate RMF-related activities with system owners, AO reps, and leadership.
• Support ATO, cATO and CtF documentation and risk acceptance decisions.
• Embed risk reviews into Sprint and PI planning within Agile/DevSecOps.

Skills

Security clearance TS/SCI

Project management

Stakeholder engagement

Agile/DevSecOps knowledge

Risk management

Education

BS/BA in IT or CS

Cybersecurity Certification (CISSP/CISM/CCISO)

Tools

Primavera Risk Analysis

ARM

GitLab

Jira

Confluence

Job description

Risk Manager Belong. Connect. Grow. with KBR!

KBR's National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. Our KBR team in Colorado Springs, CO is seeking a Risk Manager, and your contributions will directly impact the success of our projects and the overall business outcomes we aim to achieve.

Key Responsibilities

The Risk Manager will help steer Project Leadership through potential risks and opportunities, while equipping Program Management with historical context and highlighting emerging trends. Manage the project Risk Register in strict alignment with DoW RIO practices, ensuring every entry includes a clear articulation of probability, impact, mitigation plans, and ownership. Coordinate RMF-related risk activities with system owners, cybersecurity teams, Authorizing Official (AO) representatives, and program leadership to support Authority to Operate (ATO), Continuous ATO (cATO), and Certificate to Field (CtF) documents and the ongoing risk acceptance decisions for the software application. Synchronize with key stakeholders, including clients, consultants, and regulatory bodies, to ensure seamless alignment with project risk mandates and compliance standards. Assess cybersecurity and compliance risks related to NIST SP 80053 security controls, DoD STIGs, supply chain risk, and secure software development best practices, escalating material risks to program leadership as appropriate. Embed risk management directly into the Agile and DevSecOps lifecycle by integrating risk reviews into Sprint and Program Increment (PI) planning. Ensure all mitigation strategies are prioritized within the product backlog and reflected in long-term technical roadmaps. Ensure alignment with DoD acquisition and software policies, including Software Acquisition Pathway (SWP) risk considerations and continuous risk monitoring expectations for modern software programs.

Work Environment

Location: On Customer Site
Travel Requirements: Minimal
Working Hours: Flexible

Qualifications

Required:
Security Clearance: Must possess an active U.S. government TS/SCI security clearance, which only a U.S. citizen can obtain Ability to obtain and maintain a JWICS, SAP/SAR clearance Education: BS/BA in Information Technology, Computer Science, or a related field (or equivalent experience) with 10+ years of experience DODM 8140.03 Cybersecurity Certification (CISSP, CISM, CCISO, etc) Proven experience in a similar role on programs In-depth knowledge of project management methodologies and tools Proficiency in project scheduling and resource management Proficiency in risk management tools like ARM or Primavera Risk Analysis Exceptional leadership and team management abilities Excellent communication and interpersonal skills to effectively engage with stakeholders at all levels Strong problem-solving and decision-making skills Ability to work under pressure and manage multiple priorities effectively A proactive approach to risk management and conflict resolution Working knowledge of Agile, Agile XP, DevOps, and DevSecOps methodologies Networking experience Experience working with version control systems like Gitlab, Jira and Confluence Strong problem-solving skills Desired: Familiarity with DoD cybersecurity artifacts and tools, including RMF documentation, vulnerability findings, and compliance evidence used to support ATO or cATO decisions

Compensation

Basic Compensation: $122,300 - $183,400 (Salary Range for Colorado Springs Only) The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity. Additional Compensation: KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of a sign on bonus, relocation benefits, short-term incentives, long-term incentives, or discretionary payments for exceptional performance.

Company Culture and Values

Belong, Connect and Grow at KBR At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team's philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together. KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law. KBR - Delivering Solutions, Changing the World. KBR brings together the best and brightest to deliver science, technology and engineering solutions that help governments and companies around the world accomplish their most critical missions and objectives. In everything we do, we are guided by our ONE KBR Values: We Value Our People – We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential. We Deliver – We are uncompromising in our commitment to deliver innovative, high-quality, technology-led solutions for our customers and exceptional, sustainable value for all our stakeholders. We Are People of Integrity – We value honesty, trust, courage, fairness, prudence and tenacity. We believe doing what's right for the planet, the communities where we work, and our people is good for business. We Empower – We empower our people with a shared purpose, the right tools and the supportive culture they need to be proactive decision-makers, to be adaptive to change, and to succeed. We Are a Team of Teams – We have a will to succeed, but we value the achievements of our team of teams over individual accomplishments. Our collective focus makes us a better, stronger, more effective company. We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function. Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals. Worldwide, KBR employs a diverse workforce approximately 29,000 people strong, with customers in more than 80 countries and operations in 40 countries. At KBR, We Deliver.