Cyber Risk Management Analyst

KBR • Chantilly, VA

2d

About The Position

KBR is seeking a Cyber Risk Management Analyst to support the assessment, governance, and continuous improvement of cybersecurity risk management practices across the organization. The role evaluates cyber risks, conducts security assessments, monitors compliance, and develops security controls to safeguard critical systems and data. The analyst serves as an advisor to technical and business stakeholders and helps integrate security and risk management principles throughout development lifecycles.

The position includes assessing risks in enterprise technologies, applications, and AI-enabled systems; evaluating controls and coordinating remediation; conducting security testing and continuous monitoring; and supporting phishing simulations and security awareness activities. The analyst also partners with AI development, engineering, and business teams to integrate risk requirements throughout the AI system lifecycle, tracks and reports risk posture, analyzes emerging threats, and contributes to cybersecurity processes and training materials.

The role supports KBR's Mission Technology Solutions business, which is planned to spin off as the independent company Trinzic in January 2027. Employees who join the business before the spin-off are expected to transition to Trinzic when the separation is complete without reapplying. The ideal candidate is near the Chantilly, Virginia office; candidates within commuting distance of a Trinzic office are also encouraged to apply.

Requirements

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
• At least 5 years of experience in cybersecurity, cyber risk management, information security governance, or a related discipline.
• Experience conducting risk assessments, security testing, compliance reviews, and vulnerability management activities.
• U.S. citizenship is required.
• Knowledge of cybersecurity frameworks such as NIST CSF, NIST RMF, and ISO 27001.
• Understanding of AI security concepts, AI governance, and risks associated with machine learning and generative AI technologies.
• Experience assessing vulnerabilities and implementing security controls within cloud, application, or AI environments.
• Strong analytical, problem-solving, and communication skills.
• Ability to work effectively across technical and business teams.

Nice To Haves

• CISSP, CISM, CRISC, Security+, CCSP, or similar certifications.
• Experience supporting government, defense, critical infrastructure, or highly regulated environments.
• Knowledge of the NIST AI Risk Management Framework (AI RMF).
• Experience with AWS, Azure, or Google Cloud security.
• Familiarity with DevSecOps practices, secure software development, and AI model governance.

Responsibilities

• Conduct cybersecurity risk assessments and prioritize risks associated with enterprise technologies, applications, and AI-enabled systems.
• Evaluate cybersecurity controls, identify security gaps and noncompliance, assess associated risks, and coordinate remediation or risk treatment with stakeholders.
• Perform security testing, assessments, and continuous monitoring to identify vulnerabilities and recommend remediation strategies.
• Plan, execute, and monitor phishing simulation campaigns; analyze results and trends; and coordinate awareness training and follow-up activities.
• Partner with AI development, engineering, and business teams to integrate security and risk management requirements throughout the AI system lifecycle.
• Document risks, track remediation efforts, and report risk posture to stakeholders as part of security governance initiatives.
• Analyze emerging cyber threats, vulnerabilities, and technology trends to strengthen organizational security practices.
• Contribute to the development and refinement of cyber risk management processes, methodologies, and operating procedures.
• Assist in creating cybersecurity risk management and AI security training materials and awareness programs.
• Collaborate with cross-functional teams to promote security, compliance, and continuous improvement.

Benefits

• Potential additional compensation, which may include a sign-on bonus, relocation benefits, short-term incentives, long-term incentives, or discretionary payments for exceptional performance, subject to internal policy or contractual designation.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level