Chief Information Security Officer Director

Title

Chief Information Security Officer Director

Required skills

Bachelor's degree in computer science, information security, engineering, or a related field, Progressive professional experience in information security, IT risk, or technology leadership, Proven ability leading enterprise or cybersecurity programs in a global organization, Expertise securing IT environments, inclu

Preferred skills

Technologies

cloud platforms, SaaS applications, enterprise systems, workforce technologies, ERP, HRIS, CRM, data platforms, automation initiatives

Responsibilities

Define, lead, and execute KBR's information security strategy, operating model, and multiyear roadmap aligned with enterprise objectives, Serve as the enterprise authority on cyber risk, threat posture, and resilience, advising executive leadership on risk-based decision making, Establish and maintain corporate information security policies, standards, and governance aligned to frameworks such as NIST CSF, ISO 27001, SOX ITGCs, GDPR, Australia and UK data protection requirements, Oversea enterprise-wide risk management and compliance, Conduct regular risk and information security assessments to identify security vulnerabilities and threats, both internal and external, Develop and implement risk mitigation strategies and security controls to reduce and manage identified risks, Monitor compliance with applicable laws, regulations, and contractual obligations related to information security, Lead incident response and breach management, including executive communications, regulatory coordination, and post incident remediation, Partner with IT and Digital teams to embed secure by design practices into cloud adoption, enterprise applications (ERP, HRIS, CRM), data platforms, and automation initiatives, Overseer third party and supplier cyber risk management for vendors and technology partners, Support enterprise initiatives including M&A, divestitures, and system integrations from a cybersecurity and risk perspective, Build, lead, and develop a high performing global information security organization, Drive enterprise-wide security awareness, training, and accountability to strengthen KBR's cyber culture, Collaborate across regions and functions in alignment with KBR's team of teams operating model

Seniority

Domain

cybersecurity, information protection, IT, digital transformation, enterprise risk management