Information Security Administrator

APM Terminals Gothenburg; Norfolk (VA); On-site; USD 84,000 - 101,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401k + Company Match

Paid Time Off

Flexible Work Schedules

Job summary

Maersk Line, Limited is seeking an Information Security Administrator to implement, operate, and maintain cybersecurity controls across enterprise IT and vessel IT. The role demands hands-on work with vulnerability management, security tooling, incident response support, and audit evidence collection.

You will coordinate across IT teams for IAM, track remediation, and contribute to continuous compliance efforts.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field.
• Minimum 5 years in cybersecurity, information security, or secure systems administration; or 9 years without degree.
• Hands-on experience implementing and operating security controls in large environments.
• Familiarity with NIST SP 800-171 or related cybersecurity frameworks.

Responsibilities

• Implement and operate cybersecurity controls in accordance with policies, standards, and frameworks.
• Administer security tools including endpoint protection, vulnerability scanners, logging, and monitoring.
• Support incident response, evidence collection, containment, and post-incident documentation.
• Coordinate with IT teams on IAM processes (onboarding, offboarding, access changes).
• Maintain audit evidence, security documentation, and control artifacts.

Skills

Security controls

Vulnerability management

SIEM

Identity access

Incident response

Documentation

Education

Bachelor's degree in IT / Cybersecurity / CS

5+ years cybersecurity experience OR 9+ years experience (no degree)

Tools

Endpoint protection

Vulnerability scanning

Logging & monitoring

IAM concepts

Azure Government / GCC High

Job description

Maersk Line, LimitedThe Information Security Administrator is responsible for the implementation, operation, and maintenance of cybersecurity controls across enterprise IT, vessel IT, and regulated systems. This role translates cybersecurity policy, standards, and risk decisions defined by the Head of Cybersecurity into day‑to‑day operational execution.The Information Security Administrator focuses on hands‑on technical and operational security work, including vulnerability management, security tooling, incident response support, audit evidence collection, and continuous compliance activities. The role does not have authority to accept risk, but is responsible for identifying, documenting, and escalating risks and control gaps. This position serves as the execution engine of the cybersecurity program.Key Responsibilities :Implement and operate cybersecurity controls in accordance with approved policies, standards, and frameworks.Administer and maintain security tools such as endpoint protection, vulnerability scanning, logging, and monitoring systems.Monitor security alerts and events; triage, document, and escalate suspected security incidents.Support incident response activities, including evidence collection, system containment actions, and post‑incident documentation.Coordinate across IT teams to support identity and access management processes, including onboarding, offboarding, and access changes.Conduct regular vulnerability scans and assessments across enterprise, vessels, and application environments.Track vulnerabilities, remediation actions, and closure status.Coordinate with IT, infrastructure, and application teams to ensure timely remediation.Monitor emerging threats and elevate relevant risks to the Head of Cybersecurity.Collect, maintain, and organize audit and compliance evidence.Support internal assessments, external audits, and regulatory inspections.Maintain accurate security documentation, processes, and control artifacts.Assist with cybersecurity awareness training and communications.Support tabletop exercises, phishing simulations, and incident response drills.Promote secure practices across IT and operational teams.Maintain operational security metrics and dashboards.Report control status, issues, and trends to the Head of Cybersecurity and Head of IT.Escalate unresolved risks, control failures, or repeated non‑compliance.Supports commitment to safety and other selected company standards and certifications.Performs other position related duties as specified by management.Position Specifications :Education and ExperienceBachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field and a minimum of 5 years of experience in cybersecurity, information security, or systems administration with a security focus; or, in lieu of a degree, a minimum 9 years of directly related experience in cybersecurity, information security, or systems administration with a security focus.Technical Skills and Competencies RequiredHands on experience implementing and operating security controls in enterprise environmentsWorking knowledge of cybersecurity principles, controls, and best practicesFamiliarity with frameworks and standards such as NIST SP 800‑171 or related cybersecurity frameworks and Cybersecurity Maturity Model Certification (CMMC)Experience with Azure Government and GCC High environments or other secure government cloud environmentsExperience with vulnerability management tools, endpoint security solutions, log management or SIEM (Security Information and Event Management) platforms, and identity and access management conceptsStrong documentation, tracking, and organizational skillsAbility to communicate clearly with technical and non‑technical stakeholdersPossessing or the ability to obtain one of the following certifications:Certified Information System Security Professional (CISSP)Certified Information Security Auditor (CISA)Microsoft Security, Compliance, and Identity certifications (e.g., SC-200, SC-300, or AZ-500)Other relevant industry certificationsPosition RequirementsMust be a U.S. citizen capable of obtaining a security clearance from the Defense Counterintelligence and Security Agency (DCSA).MLL is a drug-free work environment and requires employees to take random drug tests during their employment with the company.This position requires access to vessels and safety sensitive facilities and therefore requires a Transportation Worker Identification Credential (“TWIC”).Travel Requirements:Occasional travel to local, regional, and international maritime ports.Learning Description: The key skills and competencies the incumbent should learn in this position.Develop capability in communicating cybersecurity risks, security posture, and mitigation strategies to leadership, stakeholders, and cross-functional teams.Expand knowledge of emerging cyber threats, industry best practices, and evolving technologies impacting the maritime transportation sector.Develop expertise in maritime cybersecurity risk assessment, including identifying vulnerabilities in vessel, operational technology (OT), and information technology (IT) environments.Physical Demands & Work EnvironmentThe physical demands and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.General office setting, typically the employee may sit comfortably to perform the work, usually at a computer terminal – with short breaks or lunch period. However, there may be some bending/stooping, reaching above shoulder level, walking; standing; carrying of light items such as papers, books or packages of up to 25 pounds. Should be able to hear & speak clearly using phone / headset to communicate with customers; be able to navigate, view & enter information on the computer.In addition to the physical demands and work environment of the office, employees must meet the following physical demands and work environment to successfully perform the essential functions of the job.Ability to safely climb ladders, gangways, and scaffolding, and to move through confined spaces, tanks, and machinery areas.Extended periods of walking, standing, bending, or working in awkward positions during ship visits.Adequate vision, hearing, and depth perception to perform inspections in varying light and noise conditions.Exposure to heat, cold, humidity, vibration, odors, and potential hazardous substances (with appropriate PPE).Working in operational areas with noise, moving machinery, and variable weather conditions, including during vessel operations.Presence in industrial repair settings with heavy equipment, welding, blasting, and other maintenance activities.Safety-critical role: Work in compliance with company HSE procedures and maritime safety regulations, with a strong focus on hazard identification and mitigation.Company Benefits:MedicalDentalVision401k + Company MatchEmployee Assistance ProgramPaid Time OffFlexible Work Schedules (when possible)And more!Pay Range:$84,000.00 - $100,800.00**The above stated pay range is the anticipated starting salary range for the position. The Company may adjust this range in light of prevailing market conditions and other factors such as location. The Company will work directly with the selected candidate(s) on the final starting salary in accordance with all applicable laws.#DE#Maersk is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, gender expression, genetic information, or any other characteristic protected by applicable law.We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by calling 757.963.8800 or emailing [e-mail] .