Information System Security Manager (ISSM)
About The Position
KBR is seeking an Information System Security Manager (ISSM) to support Assessment & Authorization (A&A) activities and cybersecurity policy and procedure development within the Information Assurance organization. The position helps obtain and maintain Authorizations to Operate (ATOs) for assigned systems, applications, networks, and devices. Based in El Segundo, California, the ISSM reports directly to the West Regional ISSM and supports the development, implementation, and enforcement of cybersecurity practices across assigned systems and locations. The ISSM serves as an onsite representative of the Information Assurance Operations organization and provides cybersecurity and information assurance expertise. The role works with government and contractor personnel, system administrators, engineers, developers, and other stakeholders to assess compliance, develop and maintain authorization documentation, address vulnerabilities, and communicate authorization status. KBR describes its people-first culture as grounded in its Zero Harm commitment and its goal of helping employees Belong, Connect and Grow.
Requirements
- Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or an equivalent combination of education and experience.
- Active DoD Top Secret security clearance with SCI eligibility.
- Current DoD 8570-compliant certification.
- At least 5 years of experience performing ISSM and/or ISSO responsibilities in classified environments.
- Experience supporting Risk Management Framework (RMF) authorization and compliance activities.
- Knowledge of Assessment & Authorization (A&A) processes and RMF requirements.
- Experience developing RMF artifacts, including Security Plans, Risk Assessments, and POA&Ms.
- Familiarity with cybersecurity compliance tools such as eMASS, ACAS, Xacta, and SCAP Compliance Checker.
- Working knowledge of NIST security standards and DISA STIGs.
- Strong organizational, analytical, and problem-solving skills.
- Excellent written and verbal communication skills and ability to collaborate across technical and non-technical teams.
Nice To Haves
- Experience supporting Department of Defense or Intelligence Community programs.
- Experience working within multi-enclave or classified network environments.
Responsibilities
- Serve as the onsite representative of the Information Assurance Operations organization and provide subject matter expertise on cybersecurity and information assurance activities.
- Conduct risk and vulnerability assessments to identify security risks, vulnerabilities, and protection requirements.
- Lead and participate in Assessment & Authorization (A&A) and Risk Management Framework (RMF) meetings with government and contractor personnel.
- Support the development and implementation of cybersecurity policies, procedures, and process improvements.
- Develop, review, and maintain RMF documentation, including Security Plans, Risk Assessment Reports, and Plans of Action & Milestones (POA&Ms).
- Assess system compliance with applicable NIST, DoD, and Intelligence Community security requirements, including NIST SP 800-53, NIST SP 800-171, and DISA STIGs and SRGs.
- Coordinate with system administrators, engineers, developers, and other stakeholders to support authorization efforts and maintain required security documentation.
- Analyze vulnerability scan results and assist with remediation activities to maintain compliance and reduce cybersecurity risk.
- Provide regular status updates, brief stakeholders on authorization activities, and prepare reports for leadership.
- Maintain awareness of evolving cybersecurity standards, RMF guidance, and security requirements and apply updates to assigned systems and processes.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
