Information System Security Manager (ISSM)

KBR • Chantilly, VA

2d • $102,700 - $154,000

About The Position

KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security. KBR is seeking a highly motivated and career-oriented Information System Security Manager (ISSM) to join our team supporting a government client in Maryland. The selected applicant will provide cybersecurity and Risk Management Framework (RMF) support to systems and applications for the customer. Will work with government and contractor personnel to provide technical and policy direction grounded in Department of Defense (DoD) and Intelligence Community (IC) policy, and act as the Subject Matter Expert (SME) with the cybersecurity domain and lead ISSOs. This is a contingent position based upon contract award

Requirements

• Active TS/SCI and willingness to sit for a poly upon request.
• Bachelor’s degree in engineering, Computer Science, or 8 years IT field experience in lieu of degree; Master’s Degree preferred
• Minimum of 2 years of Information Technology Information Assurance, or Cyber Security engineering experience.
• Minimum of 2 years of experience in conducting security assessments by reviewing security controls with the ISSO/ISSM and guide programs through RMF process.
• Must be DoD 8140 compliant
• Proven expertise with assessing security controls in accordance with NIST Special Publications (i.e.: NIST 800 Series)
• Proven in-depth knowledge of Cybersecurity principles technologies, and processes.
• Experience with NIST 800-53, Security Development
• Familiarity with performing assessments for Unclassified and Classified environments
• Ability to adapt to process changes
• Ability to interface with senior leadership
• Ability to support high visibility or high priority projects
• Possession of excellent oral and written communication skills

Nice To Haves

• Master’s Degree preferred in Engineering, Computer Science
• Preferred certifications: CISSP, ISSMP, GSLC, CAP, CASP+, CCISO CCSP, CISM, CISSP, Cloud+ or SSCP

Responsibilities

• Deliver documentation to include Executive level briefings, Assessments, Self-Assessments, RMF packages, and supporting RMF documentation
• Review Cybersecurity tool reports for the purposes of reporting and compliance
• Software Certification package development
• Support security engineering projects and solution delivery.
• Lead security audit and compliance activities for each system responsible for
• Responsible for auditing all artifacts provided in each RMF package to determine system readiness for ATO packet submissions.
• Provide recommendations to the SISO, PM, and AO regarding remediation and mitigation of identified vulnerabilities on test reports and plan of action and milestones (POA&Ms).
• Monitor system status updates and report to senior leadership.
• Create monthly executive reports, vulnerability reports.
• Monthly executive briefing to SISO, PM on security metrics
• Interface with PMs and SISO on issues needing input/concurrence
• Draft and present RMF deliverables to senior leadership
• Attend Executive Program Reviews as the ISSM
• Work with outside agencies on Memorandums of Understanding / Interconnection Service Agreements, and other senior level agreements etc.

Benefits

• KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short term incentives, long term incentives, or discretionary payments for exceptional performance.
• KBR offers a selection of competitive lifestyle benefits which could include a 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule.
• We support career advancement through professional training and development.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees