Cyber Manager - Governance (Business Analysis)
A.P. Moller – Maersk is the global leader in integrated container logistics. The business operates in 130 countries and employs c. 100,000 staff. Our company purpose is improving life for all by integrating the world.
We Offer
Maersk has established industry-leading capability in cyber resilience, even when compared to leaders within Technology and Financial Services institutions. Joining Maersk is joining a winning team with great opportunities for professional development within a global organization. In the role of Cyber Manager, you will join the Human Factors Engineering team and help to ensure that our security controls, processes and technologies are designed with human behaviour at the core to reduce security friction and ensure effective adoption. You will analyze and enhance security processes, leverage AI and automation to reduce the cognitive burden of security on our colleagues and collaborate with a variety of teams across Cyber Security and the wider Technology organization to ensure that interventions balance technology, people and process considerations.
Global integrated logistics. Secured by Maersk.
What do we do? We provide the tools, expertise and governance to manage Maersk's cyber risk. Anyone can do these things. But can our competitors do them with the same level of daily excellence as Maersk?
How do we do it? We proactively mitigate today’s risks, issues and events and tomorrow’s emerging threats. This is how we differentiate ourselves from our competitors – our maturity in managing risks, issues and events is hard to beat.
Why do we do it? We believe in defending global integrated logistics in an increasingly hostile cyber world. This strong sense of purpose is what motivates us. It is why we insourced cyber security. Security is a passion, not a transaction to be outsourced to others.
Why this job matters
We employ about 280 full time Maersk staff in our Cyber Security organisation globally and use industry-leading cyber tooling to protect Maersk and it’s 100,000 employees spread across 130 countries. We continually invest in our automated defences, the skills and knowledge of our people, and process improvement, spending $70-80M annually on cyber security. In a typical week, we see 177,000 cyber events. Of these, one every 3 minutes, 24/7, is actively testing our defences. AI and automation deal with most events, but on average our in-house human defenders process 450-600 events a week. About 1-2 incidents a day impact one endpoint or more, which Cyber Security contain, clear and return to operation so business can carry on without wider interruption from any contagion. To maintain this level of daily resilience, and for our investment in security to realise its full potential, we need to ensure that our security controls, processes, and technologies are designed with human behaviour at the core to enable adoption at scale and reduce security friction. We must leverage automation and AI where appropriate to provide secure defaults and reduce the cognitive load of security compliance on our employees, enabling the inherent resilience of our digital estate. This is where you come in – adopting a data-driven approach to process improvement and automation that enables secure behaviours and outcomes.
What you'll be doing – your accountabilities
- Embedding people and process considerations in the delivery of major Cyber initiatives to enable adoption at scale and manage human risk
- Establishing feedback loops between Cyber Security and wider Maersk to help integrate security seamlessly into workflows to drive usability and process adoption.
- Identifying ways to leverage automation and AI to streamline processes and deliver better security outcomes
- Identifying KPIs to assess the impact of delivery and enable continuous improvement
- Leveraging advanced data visualisation tools like PowerBI to synthesise complex, raw data into impactful dashboards and reports
- Identifying ways to embed process improvement and Operational Excellence within Cyber Security
Core Knowledge
- Strong analytical skills and a proven track record of manipulating and using data to inform decision making and prioritization
- Proven experience in process mapping and improvement
- Experience delivering AI/automation initiatives in an Enterprise setting.
- Ability to elicit, document and validate business and technical requirements
- Demonstrated ability to deliver business-relevant metrics and KPIs to assess the impact of behavioral factors and interventions
- Experience using agile delivery practices and tooling (e.g. the Atlassian tool suite)
Technical Breadth
- Working knowledge of secure by design principles, identity and access management, zero trust concepts, endpoint security, application security and security considerations for low code/no code development and AI adoption.
- Knowledge of the threat landscape, social engineering techniques, insider risk, and human-enabled vulnerabilities
- Understanding of enterprise cybersecurity frameworks (e.g., NIST, ISO27001)
- Experience working with GitHub would be advantageous
Leadership & Culture
- High awareness of self and awareness of others, evidenced by examples of collaboration, conflict management and stakeholder influence.
- Ability to influence stakeholders at all levels to drive change and adoption.
Execution Excellence
- Skilled in planning, scoping and reporting to deadlines.
- Able to prioritize work based on risk, capacity, and business need.
- Ability to work in a team and independently
Communication
- Able to bridge between technical disciplines and frame human risk/opportunity factors in business terms.
- Able to confidently and concisely communicate human factors risks/opportunities to stakeholders.
- Able to lead and facilitate workshops/communities of practice.
- Able to author and present high-quality engagement material, presentations, and reports.
- At least 6 years experience in an analytical leadership role
- Experience designing and implementing automation/AI solutions to enhance business outcomes
- Professional Cyber certifications (e.g., CISSP, CISM) advantageous.
Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements.
We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing [email protected].
