Responsibilities

• Define, lead, and execute KBR’s information security strategy, operating model, and multiyear roadmap aligned with enterprise objectives.
• Serve as the enterprise authority on cyber risk, threat posture, and resilience, advising executive leadership on risk‑based decision making.
• Establish and maintain corporate information security policies, standards, and governance aligned to frameworks such as NIST CSF, ISO 27001, SOX ITGCs, GDPR, Australia and UK data protection requirements.
• Oversee enterprise‑wide risk management and compliance: conduct regular risk and information security assessments to identify security vulnerabilities and threats, both internal and external.
• Develop and implement risk mitigation strategies and security controls to reduce and manage identified risks.
• Monitor compliance with applicable laws, regulations, and contractual obligations related to information security.