Sr. Architect, Cyber Security

Carnival Corporation•Miami, FL

5d•Hybrid

About The Position

The GCS Senior Cybersecurity Architect is responsible for supporting the development and implementation of enterprise cybersecurity architecture strategies, security design standards, and technical solutions that protect Carnival Corporation’s information assets, systems, and operations. This role contributes to the design and integration of security capabilities across multiple domains, including network security, cloud security, application security, data protection, endpoint security, infrastructure security, identity services and OT (Operational Technology). Operating within a global cruise environment spanning shipboard and shoreside systems, this position helps ensure the delivery of secure, scalable, and resilient security solutions across distributed and intermittently connected environments. The GCS Senior Cybersecurity Architect collaborates with business and technology teams to incorporate security requirements into projects and operational initiatives while aligning with organizational risk management objectives and cybersecurity strategies. Serving as a trusted security advisor to global brands and technology teams, the role provides architectural guidance and security oversight for technology initiatives. Responsibilities include participating in architecture and design reviews, assessing security risks, reviewing infrastructure and network changes, recommending security controls, and helping establish and maintain cybersecurity standards, patterns, and best practices. The GCS Senior Cybersecurity Architect works closely with engineering, operations, and project teams to ensure security is embedded throughout the technology lifecycle while supporting innovation, operational efficiency, and regulatory compliance. This position balances strategic planning and hands-on engagement, contributing to the continual enhancement of the organization's cybersecurity posture through the evaluation, design, and adoption of modern security technologies, frameworks, and architectures.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience)
8–10+ years of experience in cybersecurity, with at least 5+ years focused on Cybersecurity Architecture in enterprise setting
Proven experience designing and implementing Cybersecurity solutions in complex, global environments
Strong experience with Cybersecurity Architecture Review of System designs
Experience supporting large-scale Cybersecurity transformation initiatives (e.g IAM, Network Segmentation, Cloud Security Posture Management, Data Security, Endpoint Security).
Experience in Threat modeling and Cybersecurity Risk Management within Enterprise IT and OT environments.
Strong communication and strategic leadership skills are vital for aligning security with business goals.
Demonstrated expertise in Cybersecurity architecture, with a strong focus on architecture and design of systems capable of defending against evolving cyber threats.
Ability to effectively translate complex cybersecurity concepts into clear, business-aligned language for non-technical stakeholders, enabling informed decision-making.
Solid understanding of emerging cybersecurity risks associated with artificial intelligence (AI).
Knowledge of Operational Technology (OT) cybersecurity risks, with the ability to incorporate identity-centric security controls into environments that bridge IT and OT systems.
Design, evaluate, and manage Cybersecurity architectures reviews to align with business objectives and enterprise security standards.
Translate complex technical requirements into clear, actionable insights for stakeholders, resolving conflicts and driving consensus on solutions that adhere to cybersecurity best practices and corporate policies.
Drive the development of secure, resilient, and compliant system architectures that safeguard critical data, strengthen identity governance, and align with enterprise security standards and regulatory requirements.

Nice To Haves

Relevant industry certifications preferred, such as: CISSP (Certified Information Systems Security Professional), CISM or CRISC

Responsibilities

Collaborate with brand IT teams and business stakeholders to ensure new systems and applications meet security best practices, published minimum security requirements, and corporate standards. This includes reviewing network designs, application data flows, and system integrations, and providing appropriate security sign-off.
Create high level network designs for GCS security tools and cybersecurity reference architecture documentation.
Build, mature and support architectural review process.
Review system design of existing applications/systems utilizing a common framework to identify potential vulnerabilities and gaps in the system, helping to mitigate cyber risks and protect sensitive data by proactively addressing potential threats before they can be exploited.
Develop and maintain hardening standards for networking and computing environments using industry best practices.
Provide architectural guidance on delivery of secure, scalable, and resilient security solutions across distributed and intermittently connected environments by collaborating with business and technology teams to incorporate security requirements into projects and operational initiatives while aligning with organizational risk management objectives and cybersecurity strategies.
Contribute to the identification, assessment, and mitigation of cybersecurity risks and vulnerabilities to enhance the organization’s overall security posture.
Develop and maintain cybersecurity reference architectures across shipboard and shore environments, ensuring alignment with industry frameworks such as CIS, NIST, and Zero Trust Architecture principles.

Benefits

Cost-effective medical, dental and vision plans
Employee Assistance Program and other mental health resources
Additional programs include company paid term life insurance and disability coverage
401(k) plan that includes a company match
Employee Stock Purchase plan
Holidays – All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee’s discretion.
Vacation Time – All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.
Sick Time – All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.
Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
Personal and professional learning and development resources including tuition reimbursement
On-site Fitness center at our Miami campus
Annual cash bonus program