Senior Information Assurance Analyst - Oahu

Senior Information Assurance Analyst - Oahu

Date: Nov 12, 2025

Location: Honolulu, Hawai'i (HI), US, 96813

Company: Hawaiian Electric Companies

The P Information Assurance Department of the P Information Assurance Division at Hawaiian Electric Company has one management vacancy available (Professional role).

Oversees or performs assessments of company systems and networks, identifies deviations from cybersecurity policies, acceptable configurations, and guidance. Provides consulting-level knowledge and expertise for the IA division, which includes development and enforcement of cybersecurity policies & standards, risk management activities, IT and OT compliance, and secure integration of grid technologies and cloud services. Supports development of detailed plans, provides requirements for information systems’ security controls and monitoring solutions.

Performs security control reviews and develops policies, standards, and procedures to ensure proper design.

• Perform cybersecurity assessments and provide security control requirements for IT and OT projects, including externally hosted applications and grid technology projects.
• Develop and manage programs and processes for privacy, e‑discovery, security awareness training, digital forensics, patch management, vulnerability remediation, and other security and compliance programs.
• Support detailed review and approval processing for various policies, processes, and procedures necessary to support the Company’s cybersecurity and compliance requirements.
• Ensure adequate and proper internal controls, processes, practices, and standards are developed, maintained, and tested to meet policy and compliance requirements.
• Support business continuity planning, disaster recovery planning, and the Company’s Cybersecurity Incident Management Team, with occasional on‑call support.
• Participate in company emergency response activities as assigned, including any activities required for emergency response preparedness.

• Computer networking concepts and protocols, and network security methodologies.
• Risk management processes for assessing and mitigating risk.
• Cybersecurity and privacy principles and organizational requirements.
• Laws, regulations, policies, and ethics related to cybersecurity and privacy.
• Cyber threats and vulnerabilities.
• Cryptography and cryptographic key management concepts.
• Data backup and recovery concepts.
• Host/network access control mechanisms.
• Network access, identity, and access management.
• Traffic flows across the network.
• Programming language structures and logic.
• System and application security threats and vulnerabilities.
• Network attacks and their relationships to threats and vulnerabilities.
• System administration, network, and operating system hardening techniques.
• Various classes of attacks.
• Different cyber attackers.
• Cyber-attack stages.
• Network security architecture concepts.
• Specific operational impacts of cybersecurity lapses.
• Security models.
• Ethical hacking principles and techniques.
• Penetration testing principles, tools, and techniques.
• Conceptual knowledge of NIST, ISO 27000 series, OWASP, and other frameworks.
• Conceptual knowledge of utility business and operational technology systems (SCADA, DCS).

• Conduct vulnerability scans and recognize vulnerabilities.
• Assess robustness of security systems and designs.
• Detect host and network‑based intrusions via intrusion detection technologies.
• Mimic threat behaviors.
• Use penetration testing tools and techniques.
• Use social engineering techniques.
• Use network analysis tools to identify vulnerabilities.
• Review logs to identify evidence of past intrusions.
• Conduct application vulnerability assessments.
• Perform impact/risk assessments.
• Develop insights about the organization’s threat environment.
• Collaborate with teammates and other employees.
• Communicate effectively in writing and verbally.
• Analyze highly complex systems, demonstrate critical thinking and independent judgment.
• Demonstrate analytical skills and communicate effectively with managers and executives.
• Operate autonomously with general direction.