Senior Specialist, Cybersecurity Governance

Carnival Corporation • Miami, FL

4d • Hybrid

About The Position

The Senior Specialist, Cybersecurity Governance supports the execution and continuous improvement of the enterprise Cybersecurity Governance Program. The role facilitates governance processes that promote adherence to cybersecurity policies, standards, and control requirements while enabling effective oversight, accountability, and reporting across the organization. Activities include policy and standards management, exception governance, security training initiatives, compliance monitoring, metrics and reporting, and continuous improvement aligned with business objectives and regulatory requirements.

The position supports global Cybersecurity Governance programs and Global Cybersecurity Services to promote effective cybersecurity adherence across the enterprise. It works with cybersecurity risk and compliance teams, IT, Operational Technology Cybersecurity Risk Management, Maritime Cybersafety, Global Cybersecurity Services Domain Leads, Sourcing, Legal, Privacy, and business stakeholders. The role is classified as in-office: employees work at a designated Carnival office in South Florida Tuesday through Thursday and may work from home Mondays and Fridays. Candidates must be located in or willing to relocate to the Miami/Ft. Lauderdale area. No or very little travel is likely.

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, Business Administration, or a related field.
• 2–5 years of experience in cybersecurity, information security, IT risk management, governance, or related disciplines.
• Experience conducting risk identification, assessment, monitoring and reporting, control reviews, or compliance assessments.
• Experience developing guidance documentation and senior management reporting.
• Working knowledge of governance, risk, and compliance (GRC), cybersecurity principles, risk management principles and methodologies, and security control frameworks.
• Understanding of security awareness, identity and access management (including privileged access, segregation of duties, and least privilege), vulnerability management, data protection, application security, network security, security architecture, and security operations.
• Excellent written and verbal communication skills, including exceptional technical writing, editing, and communication skills.
• Strong analytical, organizational, documentation, stakeholder management, and problem-solving skills.
• Must be located in or willing to relocate to the Miami/Ft. Lauderdale area and work at a designated South Florida office Tuesday through Thursday.

Nice To Haves

• Professional certifications such as CRISC, CISSP, CISA, Security+, or CGRC.
• Experience with GRC platforms such as LogicGate, Archer, or ServiceNow IRM.
• Familiarity with regulatory and privacy requirements such as SOX, PCI DSS, GDPR, CCPA, CIS, SEC cybersecurity regulations, or other industry-specific requirements.
• Knowledge of AI security and AI governance best practices.

Responsibilities

• Develop, maintain, and administer cybersecurity governance documents, including policies, standards, procedures, playbooks, frameworks, operating models, and related documentation, aligning them with regulatory requirements, the threat and technology landscape, and organizational objectives.
• Collaborate with cybersecurity risk management, Operational Technology Cybersecurity Risk Management, Cybersecurity Compliance, IT, Maritime Cybersafety, Global Cybersecurity Services Domain Leads, Sourcing, Legal, Privacy, and business stakeholders to deliver cybersecurity governance services.
• Develop security awareness and training content, including bulletins, e-learning modules, presentations, and communications, informed by governance program metrics, domain initiatives, and the cyber threat landscape.
• Maintain document repositories and knowledge libraries, governance workflows, version control and change management, approval records, and publication processes to support policy governance and audit readiness.
• Identify opportunities to improve cybersecurity governance programs, capabilities, effectiveness, operational resilience, and maturity.
• Facilitate and influence stakeholders to adopt and adhere to cybersecurity policies, standards, and governance processes.
• Support risk appetite and risk tolerance alignment, issue management and remediation oversight, performance metrics and reporting, and governance document administration.

Benefits

• Annual cash bonus program for non-sales roles.
• Medical, dental, and vision plans.
• Employee Assistance Program and other mental health resources.
• Company-paid term life insurance and disability coverage.
• 401(k) plan with company match.
• Employee Stock Purchase plan.
• Paid time off, including company-wide holidays and floating holidays.
• Vacation time, with accrual based on role level and tenure.
• Sick time.
• Complimentary stand-by cruises and discounts on confirmed cruises, plus special rates for family and friends.
• Personal and professional learning and development resources, including tuition reimbursement.
• On-site fitness center at the Miami campus.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior