We recognize our competitive advantage - our people. We believe in our people, who share our vision of meeting the needs of our employees, customers, and communities and who carry out the continued success of the company.
Our employees are committed to the company’s foundational values: integrity, excellence, teamwork, environmental stewardship, and community commitment. In turn, we invest in our employees, providing opportunities for challenge and advancement and offering a competitive compensation package.

BRIEF POSTING DESCRIPTION:

The P EJ INFORMATION ASSURANCE Department of the P INFORMATION ASSURANCE Division at Hawaiian Electric Company has 1 Management vacancy available. (Role: PROFESSIONAL)
Posting End Date: This position will remain open until filled. Early applications are encouraged.

KNOWLEDGE REQUIREMENTS

• Working knowledge of IT risk management frameworks and principles, network security architecture, cryptography, Intrusion Detection/Prevention Systems (IDS/IPS), and other IT security best practices.
• Conceptual knowledge of Sarbanes-Oxley (SOX), National Institute of Standards and Technology (NIST) SP-800 series, ISO 27000 series, Privacy Laws (Hawaii Revised Statute 487N), Open Web Application Security Project (OWASP), and other security related frameworks, standards, and laws.
• Conceptual knowledge of business administration, IT Audit, programming and digital forensics.
• Conceptual knowledge of utility business and related Operations Technology Systems. (SCADA, DCS, etc).
• Conceptual knowledge of TCP/IP networking principles, the OSI reference model, and IEEE 802.11 and 802.1x standards.

SKILLS REQUIREMENTS

• Proven ability to analyze highly complex systems, demonstrating critical thinking skills, independent judgment, and the ability to work toward consensus in a complex business environment.
• Must demonstrate analytical skills and the ability to communicate effectively (oral and written) and work with a variety of individuals throughout the organization including managers and executives.
• Ability to operate autonomously with only general direction and guidance.

EXPERIENCE REQUIREMENTS

• Advanced (15+ years) analysis and/or leadership experience in a multi-level service or consulting organization, preferably in an information technology, application security, network security or
• quality assurance capacity. Information security experience is required.
• One or more of the following certifications are highly preferred:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Authorization Professional (CAP)
• GIAC Security Leadership (GSLC)
  Role: PROFESSIONAL
  Number of Vacancies: 1
  Location: Honolulu – Oahu
  Hiring Range: The hiring range for the Senior Information Assurance Analyst [Req ID 9303] position is $105,600.00 to $134,400.00. The person selected will be placed according to his/her skills and qualifications.

ABOUT HAWAIIAN ELECTRIC COMPANIES

Hawaiian Electric Companies provide electricity and services to 95 percent of the state’s 1.4 million residents. The company is also one of the state’s leading employers and a major contributor and supporter of community and educational programs.
The demand for power that has fueled the growth of the Hawaiian Islands has been met by Hawaiian Electric Companies for well over a century. And as the next millennium unfolds, the company is committed to providing quality service and seeking clean local energy sources to power generations of Hawaii families and businesses to come. Visit us at http://hawaiianelectric.com.
Interested individuals should apply online. The application must clearly indicate the demonstrated experience/knowledge/skills/abilities the candidate possesses which specifically qualifies him/her for the position.

• Supports information security risk assessments and recommends mitigating controls and solutions for IT and OT projects and applications, including proposals for externally hosted applications and new utility technology projects.
• Assists with program development and management for privacy, e-discovery, security awareness training, digital forensics, patch management, vulnerability remediation, and other security and compliance programs.
• Supports the detailed review and approval processing for various IT policies, processes, and procedures necessary to support the Company’s information security and compliance requirements.
• Ensures that adequate and proper internal controls and CobiT framework-based IT policies, processes, practices, and standards are developed, maintained, and tested for quality assurance in order to meet the Company’s Sarbanes-Oxley (SOX), Privacy and other compliance needs.
• Supports the IT business continuity planning, IT disaster recovery planning, and the Company’s Computer Security Incident Response Team (CSIRT).
• Participates in Company emergency response activities as assigned, including any activities required to prepare for such emergency response.