Program Manager, Cybersecurity Governance

Carnival Corporation•Miami, FL

3h•Hybrid

About The Position

The Cybersecurity Governance Program Manager leads the development, delivery, maturation, and continuous improvement of Carnival’s enterprise Cybersecurity Governance Program across a global portfolio of operating companies and brands. The role coordinates and oversees governance activities across business units, geographic regions, and technology organizations, serving as the primary subject-matter expert and liaison between Security Governance and the brands. The position supports global Cybersecurity Governance programs and Global Cybersecurity Services, helping promote cybersecurity adherence across the enterprise. It works with cybersecurity risk management, OT cybersecurity risk management, compliance, IT, Maritime Cybersafety, Global Cybersecurity Services domain leads, Sourcing, Legal, Privacy, and business stakeholders. The role is classified as in-office: employees work at a designated Carnival office in South Florida Tuesday through Thursday and may work from home Mondays and Fridays. Candidates must be in or willing to relocate to the Miami/Ft. Lauderdale area. Travel is expected to be none or very limited.

Requirements

Knowledge of governance, risk, and compliance (GRC), cybersecurity principles, risk management principles and methodologies, and security control frameworks.
Understanding of security awareness, identity and access management (including privileged access, segregation of duties, and least privilege), vulnerability management, data protection, application security, network security, security architecture, and security operations.
Strong written and verbal communication skills.
Project management skills.
Process improvement and operational excellence skills.
Technical policy editing, writing, and evaluation skills.
Must be located in or willing to relocate to the Miami/Ft. Lauderdale area.
Ability to work from a designated Carnival office in South Florida Tuesday through Thursday each week; work from home is permitted Mondays and Fridays.

Responsibilities

Establish, facilitate, and continuously improve stakeholder partnerships and workflows for the Governance Program, including standards and policy development, policy exceptions, security training, and simulations.
Serve as the primary subject-matter expert and liaison between Security Governance and brands while advancing governance frameworks and processes.
Manage cybersecurity maturity assessments, including completion, reporting, mitigations, and tracking GCS and Brand actions against target-state capabilities.
Support annual cybersecurity planning and strategic roadmap development.
Manage the lifecycle of cybersecurity governance tools and service providers, including requirements gathering, performance monitoring, and continuous improvement.
Develop, maintain, and report cybersecurity governance metrics and key performance indicators to measure program effectiveness and adherence to policies and standards.
Prepare executive dashboards, reports, and presentations that provide actionable insights, support security and standards enforcement, and communicate governance performance and efficacy to senior leadership and executive committees.
Collaborate with Cybersecurity Risk Management, OT Cybersecurity Risk Management, Cybersecurity Compliance, IT, Maritime Cybersafety, GCS Domain Leads, Sourcing, Legal, Privacy, and business stakeholders to deliver cybersecurity governance services.
Identify opportunities to improve cybersecurity governance programs, capabilities, effectiveness, operational resilience, and maturity.
Promote an ethical and compliant culture through integrity, honesty, respectful treatment, and willingness to speak up about misconduct or concerns.

Benefits

Annual cash bonus program for non-sales roles.
Medical, dental, and vision plans.
Employee Assistance Program and other mental health resources.
Company-paid term life insurance and disability coverage.
401(k) plan with company match.
Employee Stock Purchase plan.
Eight company-wide holidays plus two floating holidays for full-time and part-time employees with benefits.
Vacation time, with full-time employees at manager level and below starting at 14 days per year and director-and-above employees starting at 19 days per year; additional vacation accrues with tenure.
Annual sick time for full-time employees.
Complementary stand-by cruises, employee discounts on confirmed cruises, and special rates for family and friends.
Personal and professional learning and development resources, including tuition reimbursement.
On-site fitness center at the Miami campus.