This listing does not state pay. Across 68 open risk manager listings that state pay, the middle half runs $121,000 to $162,500 and the median is $148,000.

Listed pay is what employers advertise, not what people are paid.

Risk Manager salaries by state · Check your own pay

How AI is used in this kind of work

Among financial risk specialists, AI is already used for some of the tasks. Measured exposure for financial risk specialists: 26% (some).

Share of this job’s tasks that AI is already used for at work, from real usage. It is not a forecast of job loss, and a low number means no use seen yet. Source: Anthropic Economic Index.

Check how this applies to your own job

Skills this job asks for

Say which you have and which you want to build. We use it to match you to jobs like this one.

About the job

Title: Risk Manager

Belong. Connect. Grow. with KBR!

KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities.

Our KBR team in Colorado Springs, CO is seeking a Risk Manager, and your contributions will directly impact the success of our projects and the overall business outcomes we aim to achieve.

Key Responsibilities:

The Risk Manager will help steer Project Leadership through potential risks and opportunities, while equipping Program Management with historical context and highlighting emerging trends.

Manage the project Risk Register in strict alignment with DoW RIO practices, ensuring every entry includes a clear articulation of probability, impact, mitigation plans, and ownership.

Coordinate RMF-related risk activities with system owners, cybersecurity teams, Authorizing Official (AO) representatives, and program leadership to support Authority to Operate (ATO), Continuous ATO (cATO), and Certificate to Field (CtF) documents and the ongoing risk acceptance decisions for the software application.

Synchronize with key stakeholders, including clients, consultants, and regulatory bodies, to ensure seamless alignment with project risk mandates and compliance standards.

Assess cybersecurity and compliance risks related to NIST SP 80053 security controls, DoD STIGs, supply chain risk, and secure software development best practices, escalating material risks to program leadership as appropriate.

Embed risk management directly into the Agile and DevSecOps lifecycle by integrating risk reviews into Sprint and Program Increment (PI) planning. Ensure all mitigation strategies are prioritized within the product backlog and reflected in long-term technical roadmaps.

Ensure alignment with DoD acquisition and software policies, including Software Acquisition Pathway (SWP) risk considerations and continuous risk monitoring expectations for modern software programs.

Work Environment:

Location: On Customer Site

Travel Requirements: Minimal

Working Hours: Flexible

Qualifications:

Required:

Security Clearance: Must possess an active U.S. government TS/SCI security clearance, which only a U.S. citizen can obtain

Ability to obtain and maintain a JWICS, SAP/SAR clearance

Education: BS/BA in Information Technology, Computer Science, or a related field (or equivalent experience) with 10+ years of experience

DODM 8140.03 Cybersecurity Certification (CISSP, CISM, CCISO, etc)

Proven experience in a similar role on programs

In-depth knowledge of project management methodologies and tools

Proficiency in project scheduling and resource management

Proficiency in risk management tools like ARM or Primavera Risk Analysis

Exceptional leadership and team management abilities

Excellent communication and interpersonal skills to effectively engage with stakeholders at all levels

Strong problem-solving and decision-making skills

Ability to work under pressure and manage multiple priorities effectively

A proactive approach to risk management and conflict resolution

Working knowledge of Agile, Agile XP, DevOps, and DevSecOps methodologies

Networking experience

Experience working with version control systems like Gitlab, Jira and Confluence

Strong problem-solving skills

Desired:

Familiarity with DoD cybersecurity artifacts and tools, including RMF documentation, vulnerability findings, and compliance evidence used to support ATO or cATO decisions

Basic Compensation: $122,300 - $183,400 (Salary Range for Colorado Springs Only)

The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity.

Additional Compensation:

KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of a sign on bonus, relocation benefits, short-term incentives, long-term incentives, or discretionary payments for exceptional performance.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.