Senior Information Security Engineer

About Us

Matson has been the leading ocean shipping and logistics provider throughout the Pacific since 1882. We are the supply chain lifeline for Hawaii, Alaska, Guam, and islands of the South Pacific. We also offer the top two ocean shipping services in the world’s largest trade lane - Asia to the U.S. West Coast. With our subsidiaries Matson Terminals and Matson Logistics, our business focus is exceeding customer expectations with quality, reliability, and integrity.

We strive to operate in an environmentally sustainable manner and promote land-based environmental programs in Hawaii, Guam, and Alaska. We help improve the communities in which we work and live through our community giving program that annually supports hundreds of local organizations. And we work to improve diversity, equity and inclusion in our company, communities and industry through an active social equity program.

Matson is a great place to work, and everyone who works with us becomes part of the Matson ohana or family. Join our team and help us move freight better than anyone.

Learn more at matson.com.

About the Role

The Senior Information Security Engineer is a position within IT Services with broad, company-wide responsibilities across multiple security domains. The ideal candidate should have a proven history in proactive security risk mitigation and reactive incident response with the appropriate sense of urgency. The successful candidate will have a good mix of hands-on technical knowledge as well as higher level information security concepts, risk assessment methodologies, and security practices. This individual will have to be proactive, organized, analytical, detail oriented, and persistent.

The ideal candidate possesses a balance of strong skills in the following areas:

1. Technical: Sufficient technical depth to design, develop, and provide hands-on support of security controls, defenses and countermeasures, including but not limited to encryption and data loss prevention protocols, cryptography, intrusion detection, firewalls, and email security. Configuration and administration of policies for access control methods such as two-factor authentication (2FA), identity and access management (IAM).

1. Analytical: Strong analytical skills in ISO 27001/27002 risk-based Information Security, including security policies and governance, asset management for sensitive data, defense perspective threat modeling, identifying risk areas that require operational coverage and outlining strategies and solutions to gain that coverage, providing updates on existing and new threats to the company, staying current with information security technologies and making recommendations for use based on business value.

1. Communication: Superior self-organization, professional written and verbal communication that includes the capability to translate highly technical material to communications appropriate to different audiences, including PowerPoint decks to senior IT and business management. Consultative client-focused personalities with collaboration skills to lead cross-functional teams on security initiatives and drive effective company-wide change management and adoption. An ad hoc business writing example (not pre-prepared) may be requested during the in-person interview process, as well as a structured written response to a presented scenario that illustrates the candidate’s level of self-organization and planning.

Dimensions

Scope of systems; Impact on Company Security support for all systems and data; A direct relationship to the jobs performed by business personnel; major impact on the quality and timeliness of services delivered to customers (end-users); Major impact on the security of Matson data; enterprise-wide impact.

Internal Visibility/Level of Influence Cross-functional; interacts with all levels of IT Services personnel; interaction with business unit personnel varies by project; implements enterprise-wide technical solutions based on operational and business need and priority.

Number of Subordinates None

What you’ll do:

The Sr. Information Security Engineer is a key role in our Enterprise Information Security team and works directly with the Director, Information Security to develop and oversee impleme