Sr. Director, Chief Information Security Officer (CISO) at KBR, Inc.

Houston, Texas, United States -

Full Time

Start Date

Immediate

Expiry Date

29 Aug, 26

Salary

0.0

Posted On

31 May, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity Strategy, Risk Management, Information Protection, Incident Response, Governance, Cloud Security, Compliance, Executive Communication, Third-Party Risk Management, Secure-by-Design, Digital Transformation, Enterprise Resilience

Industry

IT Services and IT Consulting

Description

Title: Sr. Director, Chief Information Security Officer (CISO) KBR — Delivering Solutions, Changing the World. KBR is a global leader in delivering technology‑driven, mission‑critical, and sustainable solutions that truly matter. For over a century, we have powered bold missions across defense, space, industry, and government through our two core business lines: Mission Technology Solutions and Sustainable Technology Solutions. With nearly 38,000 talented people operating in more than 80 countries, we thrive on a culture built on safety, integrity, and teamwork. At KBR, we empower our people to solve the world’s toughest challenges and create lasting value for communities and the planet. We don’t just deliver results—we deliver game‑changing solutions, innovative technology, deep domain expertise, and cutting‑edge capabilities. KBR is seeking a Senior Director, Chief Information Security Officer, to provide enterprise leadership for corporate cybersecurity and information protection. This role is responsible for defining and executing KBR’s global corporate information security strategy, safeguarding corporate systems, data, intellectual property, and digital platforms while enabling secure business growth and transformation. This position focuses on corporate IT and shared services environments, including cloud platforms, SaaS applications, enterprise systems, and workforce technologies. The role operates as a trusted advisor to executive leadership, partnering across functionally to manage cyber risk and strengthen enterprise resilience. The role may be based in the Middle East, United Kingdom or United States and includes periodic global travel. Roles & Responsibilities Define, lead, and execute KBR’s information security strategy, operating model, and multi‑year roadmap aligned with enterprise objectives Serve as the enterprise authority on cyber risk, threat posture, and resilience, advising executive leadership on risk‑based decision making Establish and maintain corporate information security policies, standards, and governance aligned to frameworks such as NIST CSF, ISO 27001, SOX ITGCs, GDPR, Australia and UK data protection requirements Oversee enterprise-wide risk management and compliance, conduct regular risk and information security assessments to identify security vulnerabilities and threats, both internal and external. Develop and implement risk mitigation strategies and security controls to reduce and manage identified risks. Monitor compliance with applicable laws, regulations, and contractual obligations related to information security. Lead incident response and breach management, including executive communications, regulatory coordination, and post‑incident remediation Partner with IT and Digital teams to embed secure‑by‑design practices into cloud adoption, enterprise applications (ERP, HRIS, CRM), data platforms, and automation initiatives Oversee third‑party and supplier cyber risk management for vendors and technology partners Support enterprise initiatives including M&A, divestitures, and system integrations from a cybersecurity and risk perspective Build, lead, and develop a high‑performing global information security organization Drive enterprise‑wide security awareness, training, and accountability to strengthen KBR’s cyber culture Collaborate across regions and functions in alignment with KBR’s team of teams operating model Basic Qualifications: Bachelor’s degree in computer science, Information Security, Engineering, or a related field 15+ years of progressive experience in information security, IT risk, or technology leadership 10+ years leading enterprise or cybersecurity programs in a global organization Proven experience securing IT environments, including cloud, SaaS, identity, and enterprise applications Proven executive communication skills with the ability to translate technical risk into business impact Ability and willingness to travel internationally as required (approximately 10–20%) Professional certifications such as CISSP, CISM, or CRISC Preferred Qualifications: Master’s degree or MBA Experience supporting public company environments, including SOX and internal audit collaboration Experience leading information protection initiatives and building security culture in an international organization. Cloud security expertise (AWS, Azure, or similar platforms) Prior experience supporting large‑scale digital transformation or enterprise modernization initiatives Demonstrated success operating within a matrixed, multinational organization Effective leadership presence with the ability to influence KBR Benefits KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending accounts, disability coverage, paid time off, and flexible work schedules. We support career advancement through professional training and leadership development. Click here to learn more: KBR Benefits Belong, Connect and Grow at KBR At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward, being a People First company. That commitment is central to our team of team's philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together. Belong, Connect and Grow at KBR At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together. KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

Responsibilities

Define and execute the global corporate information security strategy to safeguard systems, data, and intellectual property. Serve as the enterprise authority on cyber risk and resilience while partnering with executive leadership to manage threats.