Program Manager, Cybersecurity Governance

Carnival Corporation•Miami, FL

3d•Hybrid

About The Position

The Cybersecurity Governance Program Manager leads the development, delivery, maturation, and continuous improvement of the enterprise Cybersecurity Governance Program across a global portfolio of operating companies and brands. The role coordinates, facilitates, and oversees governance activities across business units, geographic regions, and technology organizations, supporting effective cybersecurity adherence across the enterprise. The position serves as the primary subject matter expert and liaison between Security Governance and brands, advancing governance frameworks and processes. It works with a broad range of cybersecurity, technology, legal, privacy, sourcing, and business stakeholders to deliver governance services and improve program effectiveness, operational resilience, and maturity. The role is classified as in-office: employees work from a designated Carnival office in South Florida Tuesday through Thursday and may work from home Mondays and Fridays. Candidates must be located in or willing to relocate to the Miami/Ft. Lauderdale area. Travel is expected to be none or very limited.

Requirements

Knowledge of governance, risk, and compliance (GRC), cybersecurity principles, risk management principles and methodologies, and security control frameworks.
Understanding of security awareness, identity and access management (including privileged access, segregation of duties, and least privilege), vulnerability management, data protection, application security, network security, security architecture, and security operations.
Strong written and verbal communication skills.
Project management skills.
Process improvement and operational excellence skills.
Technical policy editing, writing, and evaluation skills.
Strong analytical, stakeholder management, communication, and problem-solving skills.
Must be located in or willing to relocate to the Miami/Ft. Lauderdale area.
Ability to work from a designated Carnival South Florida office Tuesday through Thursday each week; work from home is permitted Mondays and Fridays.

Responsibilities

Establish, facilitate, and continuously enhance stakeholder partnerships and workflows to execute the Governance Program, including standards and policy development, policy exceptions, security training, and simulations.
Serve as the primary subject matter expert and liaison between Security Governance and brands while advancing governance frameworks and processes.
Manage completion, reporting, and mitigation of cybersecurity maturity assessments; identify improvement opportunities and track GCS and Brand actions against target-state capabilities.
Support annual cybersecurity planning and strategic roadmap development.
Manage the lifecycle of cybersecurity governance tools and service providers, including requirements gathering, performance monitoring, and continuous improvement.
Drive development, maintenance, and reporting of cybersecurity governance metrics and key performance indicators to measure program effectiveness and adherence to policies and standards.
Prepare executive-level dashboards, reports, and presentations that provide actionable insights, support security and standards enforcement, and communicate governance performance and efficacy to senior leadership and executive committees.
Collaborate with Cybersecurity Risk Management, OT Cybersecurity Risk Management, Cybersecurity Compliance, IT, Maritime Cybersafety, GCS Domain Leads, Sourcing, Legal, Privacy, and business stakeholders to deliver cybersecurity governance services.
Identify opportunities to improve cybersecurity governance programs, capabilities, effectiveness, operational resilience, and maturity.
Facilitate and influence stakeholder adoption of and adherence to cybersecurity policies, standards, and governance processes.