Platform Security Lead

Share your profile with: for further enquiries contact:

Summary of the Role

We are seeking a highly skilled and experienced Platform Security Lead (PSL) with a specialized focus on Maritime Cyber Security to join our team and enhance the security posture of our maritime platforms. In this critical role within the CISO Department you will not only drive security by design across IT and Development teams but also address unique maritime cybersecurity challenges ensuring the safety and security of our container shipping operations.

As the Platform Security Lead your responsibilities will extend to assessing potential security threats or breaches specific to maritime operations raising awareness about critical security considerations unique to the maritime sector and driving the implementation of robust security requirements in close cooperation with our CISO Teams. This role demands a deep understanding of the maritime industrys regulatory landscape and the ability to tailor cybersecurity strategies to meet these specialized needs.

Role & responsibilities

As Platform Security Lead for Fleet IT at HapagLloyd you will play a crucial role in safeguarding our maritime operations by:

• Driving Security by Design Across Maritime Platforms: Ensure that cybersecurity is an integral part of the IT and development lifecycle within our maritime operations including onboard container ships and related maritime infrastructure.
• Performing MaritimeFocused Risk Assessments: Conduct comprehensive risk assessments tailored to the maritime environment including design reviews of shipboard systems network production of security requirements for maritime applications and validation of security controls on nautical IT systems.
• Serving as the Primary Security Contact for Maritime IT: Act as the main liaison for all securityrelated topics within Fleet IT connecting with the wider CISO department for expertise.
• Assessing Security Risks for Maritime Projects: Formally evaluate information security risks associated with maritime solution/business projects from inception through to deployment ensuring continuous monitoring and remediation efforts.
• Specializing in Maritime Platform Security: Develop deep knowledge of and strong relationships within the maritime platform ensuring that security is not only embedded but also addresses the specific needs of maritime operations.
• Supporting CISO Risk & Compliance with a Maritime Focus: Assist in the creation review and updating of information security policies with a particular emphasis on maritime cybersecurity challenges and compliance.
• Working handinhand with IT teams (developers architects product owners business) to serve the platforms requirements and CISO requirements to ensure that the security posture is in line with the risk appetite and threat landscape.
• Collaborating with other team members to identify opportunities for implementing common security solutions.
• Supporting our CISO Risk & Compliance team and participating in the creation review and update of information security policies.

Preferred candidate profile

• Candidates with CISSP/CISA/AWS Solution Architect/CCNA/CCNP Certifications.
• Masters or bachelors degree in information technology Information Systems Security Cybersecurity or a related field or equivalent technical training with a preference for specialization in maritime cybersecurity.
• Minimum 4 years of relevant IT and Information Security experience including significant exposure to maritime IT environments demonstrating the ability to act independently with minimal supervision.
• Experience with security architectures extending to maritimespecific technologies and systems such as shipboard networking satellite communications and container tracking systems in addition to cloud mobile enterprise web and app security architecture.
• Proven experience with threat modeling frameworks like MITRE ATT&CK STRIDE PASTA with a preference for applying these frameworks to maritime or nautical IT scenarios.
• Understanding of core concepts of ISO 27001 ISO 27017 NIST NTSC OWASP CIS CVSS with additional familiarity with maritimespecific standards and guidelines such as those from the International Maritime Organization (IMO) or other relevant maritime cybersecurity frameworks.
• Experience with security tests to address vulnerabilities unique to maritime IT systems including but not limited to code SQL injection and crosssite scripting with an understanding of the specific cybersecurity challenges faced by maritime operations.
• Deep knowledge of security in cloud computing and microservices architecture with a focus on how these technologies are leveraged in maritime environments for operational efficiency and security.
• Familiarity with securityrelated legal and regulatory requirements including those specifically applicable to maritime operations such as port security standards maritime transport security regulations and international shipping compliance requirements.
• Demonstrated specialized knowledge in web application security and mobile application security with an emphasis on data protection methods critical for the confidentiality integrity and availability of maritime operational data.
• Generalist specialist with a broad knowledge across several areas of security and deep expertise in 2 or 3 areas particularly those relevant to Fleet IT operations such as cybersecurity for navigation systems cargo management systems and shiptoshore communications.
• Excellent communication skills and the ability to translate complex technical jargon into clear understandable language for nontechnical stakeholders with an emphasis on articulating the unique security needs and challenges of Fleet IT operations to a wider audience.

Perks and benefits

Recreation: Play area with PS5 Table Tennis Foosball Carrom and Chess
Financial & Health: Provident Fund Gratuity Performance Bonus Medical Insurance Leave Travel Allowance
WorkLife Balance: Hybrid model after probation confirmation based on Managers approval 3 days in office 2 days WFH) Generous Leave Policies
Facilities: Car/Bike Parking Food Court Modern Office Environment
Professional Development: HL Academy Training Programs Career Growth Opportunities Employee Referral Policy