Senior Risk Manager - DoD Cyber RMF & Compliance

KBR; Colorado Springs (CO); Sur place; USD 122 000 - 183 000; Plein temps

Résumé du poste

KBR's National Security Solutions team in Colorado Springs, CO is seeking a Risk Manager to guide risk activities across programs and ensure alignment with DoD policies and RMF requirements.

Responsibilities include managing the Risk Register, coordinating with system owners and cybersecurity teams, and embedding risk reviews into Agile/DevSecOps lifecycles to support ATO/cATO decisions and secure software delivery.

Qualifications

• Active TS/SCI clearance required for role.
• BS/BA in Information Technology, Computer Science or related field; 10+ years experience.
• DODM 8140.03 Cybersecurity Certification (CISSP, CISM, CCISO) required.
• Proven experience in project management methodologies and tools.
• Proficiency in risk management and scheduling tools (ARM, Primavera).
• Strong leadership, communication and stakeholder engagement skills.
• Familiarity with Agile, DevSecOps, RMF processes and DoD policies.

Responsabilités

• Steer project leadership through risks and opportunities.
• Maintain the Risk Register with probability, impact, mitigation and ownership.
• Coordinate RMF-related activities with system owners, AO reps, and leadership.
• Support ATO, cATO and CtF documentation and risk acceptance decisions.
• Embed risk reviews into Sprint and PI planning within Agile/DevSecOps.

Connaissances

Security clearance TS/SCI

Project management

Stakeholder engagement

Agile/DevSecOps knowledge

Risk management

Formation

BS/BA in IT or CS

Cybersecurity Certification (CISSP/CISM/CCISO)

Outils

Primavera Risk Analysis

ARM

GitLab

Jira

Confluence

Description du poste

KBR's National Security Solutions team in Colorado Springs, CO is seeking a Risk Manager to guide risk activities across programs and ensure alignment with DoD policies and RMF requirements.

Responsibilities include managing the Risk Register, coordinating with system owners and cybersecurity teams, and embedding risk reviews into Agile/DevSecOps lifecycles to support ATO/cATO decisions and secure software delivery.