Specialist, Cybersecurity Governance

Carnival Corporation•Miami, FL

4d•Hybrid

About The Position

The Specialist, Cybersecurity Governance supports the development, execution, and continuous improvement of the enterprise Cybersecurity Governance Program. The role facilitates governance processes that promote adherence to cybersecurity policies, standards, and control requirements while enabling effective oversight, accountability, and reporting across the organization. It supports global Cybersecurity Governance programs and Global Cybersecurity Services to promote effective cybersecurity adherence across the enterprise and influences stakeholders to follow governance policies, standards, and processes that support organizational objectives. The role supports cybersecurity awareness and human-risk reduction initiatives, cybersecurity maturity assessments, and collaboration with cybersecurity, technology, legal, privacy, sourcing, maritime, and business stakeholders. It requires analytical, communication, stakeholder-management, problem-solving, organizational, and documentation skills, along with attention to detail and knowledge of governance, risk, compliance, cybersecurity, and risk management. This is an in-office position based at a designated Carnival office in South Florida. Employees work from the office Monday through Thursday and may work from home on Fridays. Candidates must be located in or willing to relocate to the Miami/Ft. Lauderdale area. No or very little travel is likely.

Requirements

Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, Business Administration, or a related field.
1–2 years of experience in cybersecurity, information security, IT risk management, governance, or related disciplines.
Knowledge of information technology, cybersecurity, and risk management.
Knowledge of governance, risk and compliance (GRC), cybersecurity principles, risk management principles and methodologies, and security control frameworks.
Understanding of security awareness, identity and access management (including privileged access, segregation of duties, and least privilege), vulnerability management, data protection, application security, network security, security architecture, and security operations.
Strong written and verbal communication skills.
Strong analytical, organizational, and documentation skills.
Strong stakeholder-management and problem-solving skills.
Exceptional attention to detail.
Must be located in or willing to relocate to the Miami/Ft. Lauderdale area.
Ability to work from a designated Carnival South Florida office Monday through Thursday; work from home is permitted on Fridays.

Nice To Haves

Professional certifications such as CRISC, CISSP, CISA, Security+, or CGRC.
Experience with GRC platforms such as LogicGate, Archer, or ServiceNow IRM.
Familiarity with regulatory and privacy requirements such as SOX, PCI DSS, GDPR, CCPA, CIS, SEC cybersecurity regulations, or other industry-specific requirements.
Knowledge of AI security and AI governance best practices.

Responsibilities

Use security awareness platforms and phishing simulation tools to plan, execute, analyze, and continuously improve phishing, smishing, vishing, and deepfake resilience and human-risk reduction initiatives.
Contribute to security awareness and training content, including bulletins, e-learning modules, presentations, and communications, using Governance program metrics, Global Cybersecurity Services domain initiatives, and the cyber threat landscape.
Support the completion, reporting, and mitigation of cybersecurity maturity assessments; evaluate program effectiveness, identify improvement opportunities, and track Global Cybersecurity Services and Brand actions against target-state capabilities.
Collaborate with Cybersecurity Risk Management, Operational Technology Cybersecurity Risk Management, Cybersecurity Compliance, IT, Maritime Cybersafety, Global Cybersecurity Services Domain Leads, Sourcing, Legal, Privacy, and business stakeholders to deliver cybersecurity governance services.
Identify opportunities to improve cybersecurity governance programs, capabilities, effectiveness, operational resilience, and maturity.
Facilitate and influence stakeholder adoption of cybersecurity policies, standards, and governance processes.
Maintain accuracy, consistency, and quality across governance processes, documentation, and communications.

Benefits

Annual cash bonus program for non-sales roles.
Medical, dental, and vision plans.
Employee Assistance Program and other mental health resources.
Company-paid term life insurance and disability coverage.
401(k) plan with company match.
Employee Stock Purchase plan.
Company-wide holidays and floating holidays for full-time and part-time employees with benefits.
Vacation time, with accrual based on employment status, level, and tenure.
Annual sick time for full-time employees; part-time employees with benefits receive sick time based on hours worked.
Complimentary stand-by cruises.
Employee discounts on confirmed cruises and special rates for family and friends.
Personal and professional learning and development resources, including tuition reimbursement.
On-site fitness center at the Miami campus.