Risk Manager

KBR • Colorado Springs, CO

28d • $122,300 - $183,400 • Onsite

About The Position

KBR’s National Security Solutions team is seeking a Risk Manager in Colorado Springs, Colorado, to support projects serving the intelligence and national security communities. The role guides project leadership through risks and opportunities, provides program management with historical context and emerging trends, and integrates risk management into project and software delivery practices. The position is on a customer site, with minimal travel and flexible working hours.

Requirements

• Active U.S. government TS/SCI security clearance; only U.S. citizens can obtain this clearance.
• Ability to obtain and maintain a JWICS, SAP/SAR clearance.
• Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent experience, with 10 or more years of experience.
• DODM 8140.03 cybersecurity certification, such as CISSP, CISM, or CCISO.
• Proven experience in a similar role on programs.
• In-depth knowledge of project management methodologies and tools.
• Proficiency in project scheduling and resource management.
• Proficiency with risk management tools such as ARM or Primavera Risk Analysis.
• Leadership and team management abilities.
• Excellent communication and interpersonal skills for engaging stakeholders at all levels.
• Strong problem-solving and decision-making skills.
• Ability to work under pressure and manage multiple priorities effectively.
• Proactive approach to risk management and conflict resolution.
• Working knowledge of Agile, Agile XP, DevOps, and DevSecOps methodologies.
• Networking experience.
• Experience with version control and collaboration systems such as GitLab, Jira, and Confluence.

Nice To Haves

• Familiarity with DoD cybersecurity artifacts and tools, including RMF documentation, vulnerability findings, and compliance evidence used to support ATO or cATO decisions.

Responsibilities

• Guide project leadership through potential risks and opportunities and provide program management with historical context and emerging trends.
• Manage the project Risk Register in alignment with DoW RIO practices, documenting probability, impact, mitigation plans, and ownership for each entry.
• Coordinate RMF-related risk activities with system owners, cybersecurity teams, Authorizing Official representatives, and program leadership in support of ATO, cATO, and CtF documents and ongoing software risk acceptance decisions.
• Coordinate with clients, consultants, and regulatory bodies to align with project risk mandates and compliance standards.
• Assess cybersecurity and compliance risks related to NIST SP 800-53 security controls, DoD STIGs, supply chain risk, and secure software development practices, escalating material risks to program leadership as appropriate.
• Integrate risk reviews into Agile and DevSecOps Sprint and Program Increment planning, and ensure mitigation strategies are prioritized in the product backlog and reflected in technical roadmaps.
• Maintain alignment with DoD acquisition and software policies, including Software Acquisition Pathway risk considerations and continuous risk monitoring expectations.

Benefits

• KBR may offer additional compensation, depending on job title or level and internal policy or contractual designation. This may include sign-on bonuses, relocation benefits, short-term incentives, long-term incentives, or discretionary payments for exceptional performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior