Specialist, Cybersecurity Governance

Miami, FL

Full-time

Hybrid

Entry Level

Carnival Corporation is hiring a Specialist, Cybersecurity Governance to support the development, execution, and continuous improvement of its enterprise Cybersecurity Governance Program. The role facilitates governance processes, supports awareness and maturity-assessment initiatives, and works with stakeholders across the organization to strengthen cybersecurity adherence and resilience.

Apply Now

Responsibilities

Utilize security awareness platforms and phishing simulation tools to plan, execute, analyze, and continuously improve phishing, smishing, vishing, and deepfake resilience and human risk reduction initiatives
Contribute to security awareness and training content, including bulletins, e-learning modules, presentations, and communications, leveraging insights from Governance program metrics, Global Cybersecurity Services (GCS) domain initiatives, and the cyber threat landscape
Support completion, reporting, and mitigations of cybersecurity maturity assessments to evaluate program effectiveness, identify improvement opportunities, and track GCS and Brand actions against target-state capabilities
Collaborate with the Cybersecurity Risk Management team, Operational Technology (OT) Cybersecurity Risk Management, Cybersecurity Compliance, IT, Maritime Cybersafety, Global Cybersecurity Services (GCS) Domain Leads, Sourcing, Legal, Privacy, and business stakeholders to deliver cybersecurity governance services
Identify opportunities to improve cybersecurity governance programs, capabilities, effectiveness, operational resilience, and maturity

Qualification

Required

This position requires strong analytical, communication, stakeholder management, and problem-solving skills
Demonstrates exceptional attention to detail, ensuring accuracy, consistency, and quality across governance processes, documentation, and communications
Knowledge of governance, risk and compliance (GRC). cybersecurity principles, risk management principles and methodologies, and security control frameworks
Understanding of security concepts: security awareness, identity and access management (including privileged access, segregation of duties principles, and least privilege principles), vulnerability management, data protection, application security, network security, security architecture, and security operations
Strong written and verbal communication skills
Strong analytical, organizational, and documentation skills
Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, Business Administration, or a related field
1-2 years of experience in cybersecurity, information security, IT risk management, governance, or related disciplines
Knowledge of information technology, cybersecurity and risk management

Preferred

Professional certifications such as: CRISC (Certified in Risk and Information Systems Control), CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), Security+, CGRC (Certified in Governance, Risk and Compliance)
Experience with GRC platforms such as LogicGate, Archer or ServiceNow IRM
Familiarity with regulatory and privacy requirements such as SOX, PCI DSS, GDPR, CCPA, CIS, SEC cybersecurity regulations, or other industry-specific requirements
Knowledge of AI security and AI governance best practices

Benefits

Annual cash bonus program for non-sales roles.
Cost-effective medical, dental and vision plans.
Employee Assistance Program and other mental health resources.
Company-paid term life insurance and disability coverage.
401(k) plan with a company match.
Employee Stock Purchase plan.
All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee’s discretion.
Full-time employees at the manager and below level start with 14 days/year of vacation; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.
All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.
Complimentary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends.
Personal and professional learning and development resources, including tuition reimbursement.
On-site fitness center at the Miami campus.
In-office in South Florida Monday through Thursday each week, with the option to work from home on Fridays.

Carnival Corporation is a cruise company providing travelers with vacation experiences.

Glassdoor