Program Manager, Cybersecurity Risk

Holland America Group • Miami, FL

1d • Hybrid

About The Position

The Cybersecurity Risk Program Manager is responsible for driving the execution and continuous improvement of the enterprise Cybersecurity Risk Management Program across a global portfolio of operating companies and brands. This role serves as the operational driver for cybersecurity risk governance, coordinating and facilitating risk management activities across multiple business units, geographic regions, and technology organizations to ensure consistent identification, assessment, prioritization, treatment, and reporting of cybersecurity risks. The Cybersecurity Risk Program Manager partners closely with Governance, Compliance, Global Cybersecurity Service domains, Information Technology, Privacy, Legal, Internal Audit, Sourcing, and business leadership to drive a consistent and scalable cybersecurity risk management program that aligns with the organization's cybersecurity strategy, enterprise cybersecurity risk framework, and business objectives. This position requires strong program management, stakeholder engagement, analytical, and communication skills to coordinate complex, cross-functional initiatives across a global enterprise while enabling informed, risk-based decision making.

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Risk Management, Computer Science, Business Administration, or a related field.
• Strong understanding of cybersecurity principles, technology risk, governance processes, and control frameworks.
• Excellent communication, facilitation, organizational, and stakeholder management skills.
• 5+ years of experience in cybersecurity, information security, enterprise risk management, governance, compliance, audit, or related disciplines.
• 3+ years of experience leading enterprise programs or cross-functional initiatives within a complex global organization.
• Experience managing project and program risks.
• Demonstrated ability to manage multiple priorities across geographically dispersed teams.
• Knowledge of workplace policies and procedures.
• Familiarity with team collaboration tools and techniques.
• Strong time management and organizational skills.
• Ability to maintain reliable and consistent attendance.
• Capacity to be punctual and meet deadlines.
• Ability to collaborate effectively with colleagues and work as part of a team.
• Demonstrated professionalism in all interactions and tasks.

Responsibilities

• Drive the day-to-day execution of the global Cybersecurity Risk Management Program and operational functions.
• Ensure the development and maintenance of the cybersecurity risk management framework, operating model, processes, procedures, and governance documentation.
• Coordinate enterprise cybersecurity risk assessment activities across applications, infrastructure, cloud services, operational technology, third-party providers, and business initiatives.
• Drive continuous improvement of the cybersecurity risk program through process optimization, automation, and governance maturity initiatives.
• Facilitate and coordinate maintenance of the Enterprise Cybersecurity Risk Register and IT Cybersecurity Risk Register to ensure risks are appropriately documented, assessed, prioritized, and treated.
• Coordinate the lifecycle of cybersecurity risks, including identification, analysis, treatment, acceptance, monitoring, and closure.
• Facilitate risk review meetings with business, technology, and cybersecurity stakeholders.
• Track remediation plans, risk acceptance decisions, and mitigation progress.
• Monitor emerging cyber threats and technology risks that may impact enterprise risk exposure.
• Serve as the central coordinator for cybersecurity risk activities across multiple global brands and operating companies.
• Promote standardized risk assessment methodologies while accommodating business-specific regulatory and operational requirements.
• Facilitate collaboration between corporate cybersecurity teams and brand-level security organizations.
• Share risk trends, lessons learned, and leading practices across the enterprise.
• Support integration of acquired businesses into the enterprise cybersecurity risk management program.
• Develop and manage annual cybersecurity risk program roadmaps, milestones, deliverables, and operational plans.
• Coordinate cross-functional workstreams supporting enterprise cybersecurity risk initiatives.
• Maintain program schedules, action registers, dependencies, and issue logs.
• Monitor program performance, resource needs, and operational metrics.
• Support strategic cybersecurity initiatives by integrating risk management into project governance and technology delivery processes.
• Support the development of executive dashboards, key risk indicators (KRIs), key performance indicators (KPIs), and operational metrics for cybersecurity risk.
• Assist with preparation of risk reports for executive leadership, cybersecurity governance committees, enterprise risk committees, and audit committees.
• Communicate risk in clear business terms to technical and non-technical stakeholders.
• Coordinate policy exception reviews, risk acceptance documentation, and governance approvals.
• Support internal audits, external audits, customer assessments, and regulatory examinations by providing risk documentation and evidence.
• Identify opportunities to enhance cybersecurity risk methodologies, reporting capabilities, and governance processes.
• Support implementation and optimization of Governance, Risk, and Compliance (GRC) platforms.
• Promote automation, workflow improvements, and standardized reporting across the cybersecurity risk program.
• Benchmark program maturity against industry best practices and recommend strategic enhancements.

Benefits

• Annual cash bonus program
• Cost-effective medical, dental and vision plans
• Employee Assistance Program and other mental health resources
• Company paid term life insurance and disability coverage
• 401(k) plan that includes a company match
• Employee Stock Purchase plan
• Holidays – All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays
• Vacation Time
• Sick Time
• Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
• Personal and professional learning and development resources including tuition reimbursement
• On-site Fitness center at our Miami campus

What This Job Offers

• Job Type: Full-time
• Career Level: Manager