Senior Specialist, Cybersecurity Governance
About The Position
The Senior Specialist, Cybersecurity Governance supports the execution and continuous improvement of the enterprise Cybersecurity Governance Program. The role facilitates processes that promote adherence to cybersecurity policies, standards, and control requirements while enabling oversight, accountability, and reporting across the organization. Governance activities include policy and standards management, exception governance, security training initiatives, compliance monitoring, metrics and reporting, and continuous improvement aligned with business objectives and regulatory requirements. The position supports global Cybersecurity Governance programs and Global Cybersecurity Services, influencing stakeholders to adopt and adhere to cybersecurity policies, standards, and governance processes. It works with cybersecurity risk and compliance teams, IT, Operational Technology (OT) Cybersecurity Risk Management, Maritime Cybersafety, Global Cybersecurity Services domain leads, Sourcing, Legal, Privacy, and business stakeholders. This is an in-office role based at a designated Carnival office in South Florida, with work from the office Tuesday through Thursday and the option to work from home Monday and Friday. Candidates must be in or willing to relocate to the Miami/Ft. Lauderdale area. No or very little travel is likely.
Requirements
- Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, Business Administration, or a related field.
- 2–5 years of experience in cybersecurity, information security, IT risk management, governance, or related disciplines.
- Working knowledge of governance, risk and compliance (GRC), cybersecurity principles, risk management principles and methodologies, and security control frameworks.
- Understanding of security awareness, identity and access management (including privileged access, segregation of duties, and least privilege), vulnerability management, data protection, application security, network security, security architecture, and security operations.
- Experience conducting risk identification, assessment, monitoring and reporting, control reviews, or compliance assessments.
- Experience developing guidance documentation and senior management reporting.
- Excellent written and verbal communication skills, including technical writing and editing.
- Strong analytical, organizational, documentation, stakeholder management, and problem-solving skills.
- Ability to support enterprise-wide governance activities and influence stakeholders to adopt cybersecurity policies, standards, and processes.
- Must be located in or willing to relocate to the Miami/Ft. Lauderdale area.
Nice To Haves
- Professional certifications such as CRISC, CISSP, CISA, Security+, or CGRC.
- Experience with GRC platforms such as LogicGate, Archer, or ServiceNow IRM.
- Familiarity with regulatory and privacy requirements such as SOX, PCI DSS, GDPR, CCPA, CIS, SEC cybersecurity regulations, or other industry-specific requirements.
- Knowledge of AI security and AI governance best practices.
Responsibilities
- Develop, maintain, and administer cybersecurity policies, standards, procedures, playbooks, frameworks, operating models, and related governance documentation, aligning them with regulatory requirements, the threat and technology landscape, and organizational objectives.
- Collaborate with Cybersecurity Risk Management, OT Cybersecurity Risk Management, Cybersecurity Compliance, IT, Maritime Cybersafety, Global Cybersecurity Services domain leads, Sourcing, Legal, Privacy, and business stakeholders to deliver cybersecurity governance services.
- Develop security awareness and training content, including bulletins, e-learning modules, presentations, and communications, using governance metrics, domain initiatives, and cyber threat landscape insights.
- Maintain document repositories and knowledge libraries, governance workflows, version control and change management, approval records, and publication processes to support effective policy governance and audit readiness.
- Identify opportunities to improve cybersecurity governance programs, capabilities, effectiveness, operational resilience, and maturity.
- Support compliance monitoring, metrics and reporting, exception governance, and continuous improvement activities.
Benefits
- Annual cash bonus program for non-sales roles.
- Medical, dental, and vision plans.
- Employee Assistance Program and other mental health resources.
- Company-paid term life insurance and disability coverage.
- 401(k) plan with company match.
- Employee Stock Purchase plan.
- Company-wide holidays and floating holidays for eligible employees.
- Vacation time, with additional vacation earned through tenure.
- Annual sick time for eligible employees.
- Complimentary stand-by cruises, employee discounts on confirmed cruises, and special rates for family and friends.
- Personal and professional learning and development resources, including tuition reimbursement.
- On-site fitness center at the Miami campus.
- Director-and-above roles may be eligible for a discretionary equity incentive plan.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
