Information Systems Security Manager (ISSM)

KBR•Orange Park, FL

About The Position

KBR's National Security Solutions team provides high-end engineering and advanced technology solutions to customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security. KBR delivers science, technology, engineering, and logistics solutions that help accomplish some of the world's most challenging missions. Our Government Solutions team supports Department of Defense programs through innovative cybersecurity, systems engineering, and information assurance services. We are seeking an experienced Information Systems Security Manager (ISSM) to support critical Air Force and DoD weapon system and information technology programs. The successful candidate will serve as the cybersecurity lead responsible for ensuring systems maintain compliance with federal and DoD cybersecurity requirements while supporting operational mission objectives.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Business, Engineering, or related field.
Minimum 8 years of Information Assurance, Cybersecurity, or Information Security experience supporting federal or DoD environments.
Able to obtain Secret Security Clearance within six months.
Demonstrated experience with: Risk Management Framework (RMF)
eMASS
NIST 800-53 Security Controls
Security Control Assessment and Validation
FISMA Compliance
Vulnerability Management
Plan of Action & Milestones (POA&M) Management
Assessment and Authorization (A&A) Processes
Experience developing and maintaining accreditation documentation.
Strong written and verbal communication skills.

Nice To Haves

Certified Information Security Manager (CISM) or equivalent
Experience supporting U.S. Air Force acquisition or weapon system programs.
Familiarity with ST&E and Continuous Monitoring programs.
Master's Degree in a related discipline.
Cybersecurity strategy development
Security risk analysis
Compliance management
Configuration management
Vulnerability assessment
Stakeholder engagement
Technical documentation development

Responsibilities

Lead cybersecurity efforts supporting Assessment and Authorization (A&A) activities in accordance with the Risk Management Framework (RMF).
Develop, maintain, and manage security authorization packages using eMASS and related cybersecurity tools.
Prepare and update System Security Plans (SSPs), Risk Assessments, Configuration Management Plans, Contingency Plans, and POA&Ms.
Perform security control assessments and evaluate compliance with NIST SP 800-53 requirements.
Conduct vulnerability assessments utilizing scanning and auditing tools and coordinate remediation activities.
Support continuous monitoring programs and maintain cybersecurity documentation throughout the system lifecycle.
Coordinate with Program Managers, System Owners, Information System Security Officers (ISSOs), Authorizing Officials, and engineering teams.
Provide cybersecurity guidance for Air Force weapon systems, avionics systems, and mission-critical IT platforms.
Analyze security risks and recommend mitigations to ensure compliance with DoD, FISMA, OMB, and federal cybersecurity mandates.
Support security reviews, inspections, audits, and accreditation activities.
Monitor cybersecurity status and provide regular reporting to leadership and stakeholders.