Information Security Administrator

Maersk; Norfolk (VA); On-site; USD 84,000 - 101,000; Full time

Job summary

Maersk Line, Limited is seeking a seasoned Information Security Administrator to implement, operate, and maintain cybersecurity controls across enterprise IT, vessel IT, and regulated systems. You’ll translate security policy into day‑to‑day execution and serve as the execution engine of the cybersecurity program.

Responsibilities include vulnerability management, incident support, audit evidence collection, and ongoing compliance.

Qualifications

• Bachelor's degree in IT, Cybersecurity, CS or related field with 5+ years in cybersecurity.
• Or 9 years of related cybersecurity experience in lieu of degree.
• Hands-on experience implementing and operating security controls.
• Familiarity with NIST SP 800-171 or CMMC.
• Experience with Azure Gov/GCC High.
• Experience with vulnerability management, SIEM, and IAM.
• Strong documentation and communication skills.
• Certifications: CISSP, CISA, or SC/AZ certifications.

Responsibilities

• Implement and operate cybersecurity controls across enterprise IT and vessels.
• Administer security tools, vulnerability scanning, logging, and monitoring.
• Triage alerts, document incidents, and support incident response.
• Coordinate access management processes across IT teams.
• Track vulnerabilities and remediation status.
• Assist with audits, regulatory inspections, and documentation.

Skills

Security controls

Vulnerability management

Incident response

Documentation

Communication

IAM concepts

Certifications

Education

Bachelor's degree in IT/Cybersecurity/CS

5+ years cybersecurity experience

9 years experience without degree

Tools

Azure Government / GCC High

Vulnerability management tools

SIEM platforms

Endpoint protection

IAM concepts

Job description

Maersk Line, Limited The Information Security Administrator is responsible for the implementation, operation, and maintenance of cybersecurity controls across enterprise IT, vessel IT, and regulated systems. This role translates cybersecurity policy, standards, and risk decisions defined by the Head of Cybersecurity into day‑to‑day operational execution. The Information Security Administrator focuses on hands‑on technical and operational security work, including vulnerability management, security tooling, incident response support, audit evidence collection, and continuous compliance activities. The role does not have authority to accept risk, but is responsible for identifying, documenting, and escalating risks and control gaps. This position serves as the execution engine of the cybersecurity program.

Key Responsibilities:

• Implement and operate cybersecurity controls in accordance with approved policies, standards, and frameworks.
• Administer and maintain security tools such as endpoint protection, vulnerability scanning, logging, and monitoring systems.
• Monitor security alerts and events; triage, document, and elevate suspected security incidents.
• Support incident response activities, including evidence collection, system containment actions, and post‑incident documentation.
• Coordinate across IT teams to support identity and access management processes, including onboarding, offboarding, and access changes.
• Conduct regular vulnerability scans and assessments across enterprise, vessels, and application environments.
• Track vulnerabilities, remediation actions, and closure status.
• Coordinate with IT, infrastructure, and application teams to ensure timely remediation.
• Monitor emerging threats and elevate relevant risks to the Head of Cybersecurity.
• Collect, maintain, and organize audit and compliance evidence.
• Support internal assessments, external audits, and regulatory inspections.
• Maintain accurate security documentation, processes, and control artifacts.
• Assist with cybersecurity awareness training and communications.
• Support tabletop exercises, phishing simulations, and incident response drills.
• Promote secure practices across IT and operational teams.
• Maintain operational security metrics and dashboards.
• Report control status, issues, and trends to the Head of Cybersecurity and Head of IT.
• Escalate unresolved risks, control failures, or repeated non‑compliance.
• Supports commitment to safety and other selected company standards and certifications.
• Performs other position related duties as specified by management.

Position Specifications:

Education and Experience

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field and a minimum of 5 years of experience in cybersecurity, information security, or systems administration with a security focus; or, in lieu of a degree, a minimum 9 years of directly related experience in cybersecurity, information security, or systems administration with a security focus.

Technical Skills and Competencies Required

• Hands on experience implementing and operating security controls in enterprise environments
• Working knowledge of cybersecurity principles, controls, and best practices
• Familiarity with frameworks and standards such as NIST SP 800‑171 or related cybersecurity frameworks and Cybersecurity Maturity Model Certification (CMMC)
• Experience with Azure Government and GCC High environments or other secure government cloud environments
• Experience with vulnerability management tools, endpoint security solutions, log management or SIEM (Security Information and Event Management) platforms, and identity and access management concepts
• Strong documentation, tracking, and organizational skills
• Ability to communicate clearly with technical and non‑technical stakeholders
• Possessing or the ability to obtain one of the following certifications: Certified Information System Security Professional (CISSP)
• Certified Information Security Auditor (CISA)
• Microsoft Security, Compliance, and Identity certifications (e.g., SC-200, SC-300, or AZ-500)
• Other relevant industry certifications

Position Requirements

Must be a U.S. citizen capable of obtaining a security clearance from the Defense Counterintelligence and Security Agency (DCSA). MLL is a drug‑free work environment and requires employees to take random drug tests during their employment with the company. This position requires access to vessels and safety sensitive facilities and therefore requires a Transportation Worker Identification Credential (“TWIC”).

Travel Requirements

Occasional travel to local, regional, and international maritime ports.

Learning Description

• Develop capability in communicating cybersecurity risks, security posture, and mitigation strategies to leadership, stakeholders, and cross‑functional teams.
• Expand knowledge of emerging cyber threats, industry best practices, and evolving technologies impacting the maritime transportation sector.
• Develop expertise in maritime cybersecurity risk assessment, including identifying vulnerabilities in vessel, operational technology (OT), and information technology (IT) environments.

Physical Demands & Work Environment

The physical demands and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. General office setting, typically the employee may sit comfortably to perform the work, usually at a computer terminal – with short breaks or lunch period. However, there may be some bending/stooping, reaching above shoulder level, walking; standing; carrying of light items such as papers, books or packages of up to 25 pounds. Should be able to hear & speak clearly using phone / headset to communicate with customers; be able to navigate, view & enter information on the computer. In addition to the physical demands and work environment of the office, employees must meet the following physical demands and work environment to successfully perform the essential functions of the job. Ability to safely climb ladders, gangways, and scaffolding, and to move through confined spaces, tanks, and machinery areas. Extended periods of walking, standing, bending, or working in awkward positions during ship visits. Adequate vision, hearing, and depth perception to perform inspections in varying light and noise conditions. Exposure to heat, cold, humidity, vibration, odors, and potential hazardous substances (with appropriate PPE). Working in operational areas with noise, moving machinery, and variable weather conditions, including during vessel operations. Presence in industrial repair settings with heavy equipment, welding, blasting, and other maintenance activities. Safety‑critical role: Work in compliance with company HSE procedures and maritime safety regulations, with a strong focus on hazard identification and mitigation.

Company Benefits:

• Medical
• Dental
• Vision
• 401k + Company Match
• Employee Assistance Program
• Paid Time Off
• Flexible Work Schedules (when possible)
• And more!

Pay Range:

Pay Range: $84,000.00 - $100,800.00* *The above stated pay range is the anticipated starting salary range for the position. The Company may adjust this range in light of prevailing market conditions and other factors such as location. The Company will work directly with the selected candidate(s) on the final starting salary in accordance with all applicable laws.

Equal Opportunity Statement

Maersk is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, gender expression, genetic information, or any other characteristic protected by applicable law. We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by calling 757.963.8800 or emailing [e-mail].

A.P. Moller - Maersk is an integrated container logistics company working to connect and simplify its customer's supply chains. As the global leader in shipping services, the company operates in 130 countries and employs roughly 100,000 people. With simple end‑to‑end offering of products and digital services, seamless customer engagement and a superior end‑to‑end delivery network, Maersk enables its customers to trade and grow by transporting goods anywhere - all over the world. For more information click here. All the way.