Chief Information Security Officer Director

About the role

KBR is looking for a Chief Information Security Officer Director to lead corporate cybersecurity and information protection worldwide. The role shapes and executes a global security strategy that safeguards systems, data, intellectual property and digital platforms while supporting secure business growth.

Key responsibilities

• Define and drive KBR’s information security strategy, operating model and multiyear roadmap.
• Act as the enterprise authority on cyber risk, threat posture and resilience, advising executive leadership.
• Establish and maintain security policies, standards and governance aligned to NIST CSF, ISO 27001, SOX ITGCs, GDPR and regional data‑protection laws.
• Conduct risk and security assessments, develop mitigation strategies and monitor compliance.
• Lead incident response, breach management and regulatory coordination.
• Partner with IT and Digital teams to embed secure‑by‑design practices in cloud adoption, SaaS, ERP, HRIS, CRM, data platforms and automation.
• Oversee third‑party cyber risk management and support M&A, divestitures and system integrations.
• Build and lead a high‑performing global security organization and drive security awareness across the enterprise.

Required profile

• Bachelor’s degree in computer science, information security, engineering or a related field.
• Progressive experience in information security, IT risk or technology leadership.
• Proven ability to lead enterprise‑wide cybersecurity programs in a global organization.
• Experience securing cloud environments, SaaS applications, identity systems and enterprise applications.

Required skills

• NIST CSF
• ISO 27001
• SOX ITGCs
• GDPR
• Cloud security
• SaaS security
• Identity management
• ERP security
• HRIS security
• CRM security
• Data platform security
• Automation security
• Risk assessment
• Incident response
• Third‑party risk management