Senior Risk & Compliance Lead, DoD Cyber Ops

Trinzic; Colorado Springs (CO); Presencial; USD 122.000 - 183.000; Jornada completa

Descripción de la vacante

KBR’s National Security Solutions team in Colorado Springs seeks a Risk Manager to guide risk across programs, including RMF, ATO, and continuous risk monitoring. The role embeds risk reviews in Agile/DevSecOps delivery and collaborates with stakeholders to drive secure software development and governance.

Candidates should hold an active TS/SCI clearance, U.S. citizenship, and a BS/BA in a related field with 10+ years of experience.

Formación

• Active TS/SCI clearance required.
• U.S. citizen with ability to obtain JWICS, SAP/SAR clearance.
• BS/BA in Information Technology, Computer Science, or related field with 10+ years experience.
• DODM 8140.03 cybersecurity certification (CISSP, CISM, CCISO, etc).
• Proven experience in a similar role on DoD programs.

Responsabilidades

• Steer project leadership through risks and opportunities with historical context and trend analysis.
• Manage the Risk Register with probability, impact, mitigation, and ownership.
• Coordinate RMF risk activities with system owners and cybersecurity teams to support ATO/cATO/CtF decisions.
• Align with clients, consultants, and regulatory bodies on risk mandates and compliance standards.
• Assess cybersecurity and compliance risks related to NIST SP 800-53 controls and DoD STIGs.
• Embed risk reviews into Agile/DevSecOps lifecycle and prioritise mitigations in the backlog.
• Ensure DoD acquisition and software policy alignment, including SWP risk considerations.

Conocimientos

Leadership

Communication

Problem-solving

Agile/DevSecOps

Risk management

Project management

Stakeholder engagement

Educación

BS/BA in IT/CS or related field

Herramientas

ARM

Primavera Risk Analysis

GitLab

Jira

Confluence

Descripción del empleo

KBR’s National Security Solutions team in Colorado Springs seeks a Risk Manager to guide risk across programs, including RMF, ATO, and continuous risk monitoring. The role embeds risk reviews in Agile/DevSecOps delivery and collaborates with stakeholders to drive secure software development and governance.

Candidates should hold an active TS/SCI clearance, U.S. citizenship, and a BS/BA in a related field with 10+ years of experience.