Chief Information Security Officer Director

KBR is a global provider of differentiated, professional services and technologies delivered across a wide government, defense and industrial base. Drawing from its rich 100-year history and culture of innovation and mission focus, KBR creates sustainable value by combining engineering, technical and scientific expertise with its full life cycle capabilities to help our clients meet their most pressing challenges today and into the future.

We deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 80 countries and operations in over 29 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results. At KBR, We Deliver.

KBR is seeking a Chief Information Security Officer Director to provide enterprise leadership for corporate cybersecurity and information protection. This role will define and execute KBR’s global corporate information security strategy, safeguarding corporate systems, data, intellectual property, and digital platforms while enabling secure business growth and transformation.

This Chief Information Security Officer Director will focus on corporate IT and shared services environments, including cloud platforms, SaaS applications, enterprise systems, and workforce technologies. The role operates as a trusted advisor to executive leadership, partnering across functionally to manage cyber risk and strengthen enterprise resilience.

Ability and willingness to travel internationally as required (approximately 10–20%).

Responsibilities:

• Define, lead, and execute KBR’s information security strategy, operating model, and multiyear roadmap aligned with enterprise objectives
• Serve as the enterprise authority on cyber risk, threat posture, and resilience, advising executive leadership on risk-based decision making
• Establish and maintain corporate information security policies, standards, and governance aligned to frameworks such as NIST CSF, ISO 27001, SOX ITGCs, GDPR, Australia and UK data protection requirements
• Oversee enterprise-wide risk management and compliance:
  • Conduct regular risk and information security assessments to identify security vulnerabilities and threats, both internal and external
  • Develop and implement risk mitigation strategies and security controls to reduce and manage identified risks
  • Monitor compliance with applicable laws, regulations, and contractual obligations related to information security
• Lead incident response and breach management, including executive communications, regulatory coordination, and post incident remediation
• Partner with IT and Digital teams to embed secure by design practices into cloud adoption, enterprise applications (ERP, HRIS, CRM), data platforms, and automation initiatives
• Oversee third party and supplier cyber risk management for vendors and technology partners
• Support enterprise initiatives including M&A, divestitures, and system integrations from a cybersecurity and risk perspective
• Build, lead, and develop a high performing global information security organization
• Drive enterprise-wide security awareness, training, and accountability to strengthen KBR’s cyber culture
• Collaborate across regions and functions in alignment with KBR’s team of teams operating model