Specialist, Cybersecurity Risk

Carnival Corporation•Miami, FL

1d•Hybrid

About The Position

The Cybersecurity Risk Specialist is responsible for supporting the organization’s cybersecurity first-party risk management and third party risk management program. The role supports risk management processes that enable the organization to manage, control and report on cybersecurity risk in alignment with business objectives, regulatory requirements, and enterprise risk appetite. The ideal candidate possesses a broad understanding of IT cybersecurity governance, risk and compliance and people, process, and technology controls used to manage cybersecurity risk.

Requirements

Knowledge of governance, risk and compliance (GRC). cybersecurity principles, risk management principles and methodologies, and security control frameworks.
Understanding of security concepts: security awareness, identity and access management (including privileged access, segregation of duties principles, and least privilege principles), vulnerability management, data protection, application security, network security, security architecture, and security operations.
Strong written and verbal communication skills.
Strong analytical, organizational, and documentation skills.
Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, Business Administration, or a related field.
1-2 years of experience in cybersecurity, information security, IT risk management, governance, or related disciplines.
Knowledge of information technology, cybersecurity and risk management.

Nice To Haves

Professional certifications such as: CRISC (Certified in Risk and Information Systems Control), CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), Security+, CGRC (Certified in Governance, Risk and Compliance)
Experience with GRC platforms such as LogicGate, Archer or ServiceNow IRM.
Familiarity with regulatory and privacy requirements such as SOX, PCI DSS, GDPR, CCPA, CIS, SEC cybersecurity regulations, or other industry-specific requirements.
Knowledge of third-party risk management and supplier cybersecurity assessments.

Responsibilities

Support the identification, assessment and monitoring of inherent and residual cybersecurity risks (first and third party), help recommend mitigation strategies, assist with monitoring mitigation activities, and support risk escalation and acceptance processes.
Support the maintenance of cybersecurity risk registers and help ensure risks are appropriately identified, documented, updated, tracked, and escalated.
Assist in identifying emerging threats, trends, and systemic risks that may impact organizational objectives.
Support enterprise risk management integration and cybersecurity risk reporting activities.
Monitor cybersecurity key risk indicators (KRIs), key performance indicators (KPIs), and programming maturity metrics.
Prepare governance and risk management materials, executive dashboards, scorecards, metrics, and reports for senior leadership and business stakeholders.
Collaborate with Cybersecurity Risk Management team, Operational Technology (OT) Cybersecurity Risk Management, Cybersecurity Governance, Cybersecurity Compliance, IT, Maritime Cybersafety, Global Cybersecurity Services (GCS) Domain Leads, Sourcing, Legal, Privacy, and business stakeholders regarding cybersecurity requirements and contractual obligations.
Identify opportunities to improve cybersecurity risk management services programs, capabilities, effectiveness, operational resilience, and maturity.
Support annual cybersecurity planning, strategic roadmap development, and maturity assessments.

Benefits

Cost-effective medical, dental and vision plans
Employee Assistance Program and other mental health resources
Company paid term life insurance and disability coverage
401(k) plan that includes a company match
Employee Stock Purchase plan
Holidays – All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee’s discretion.
Vacation Time – All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.
Sick Time – All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.
Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
Personal and professional learning and development resources including tuition reimbursement
On-site Fitness center at our Miami campus
Annual cash bonus program