Specialist, Cybersecurity Risk

Miami, FL

Full-time

Hybrid

Entry Level

Carnival Corporation is a global leisure travel company operating a diverse portfolio of cruise brands and destinations. The Cybersecurity Risk Specialist supports first-party and third-party cybersecurity risk management, including risk assessments, risk registers, reporting, mitigation monitoring, governance materials, and cybersecurity program improvement.

Apply Now

Responsibilities

Support the identification, assessment and monitoring of inherent and residual cybersecurity risks (first and third party), help recommend mitigation strategies, assist with monitoring mitigation activities, and support risk escalation and acceptance processes
Support the maintenance of cybersecurity risk registers and help ensure risks are appropriately identified, documented, updated, tracked, and escalated. Assist in identifying emerging threats, trends, and systemic risks that may impact organizational objectives
Support enterprise risk management integration and cybersecurity risk reporting activities. Monitor cybersecurity key risk indicators (KRIs), key performance indicators (KPIs), and programming maturity metrics. Prepare governance and risk management materials, executive dashboards, scorecards, metrics, and reports for senior leadership and business stakeholders
Collaborate with Cybersecurity Risk Management team, Operational Technology (OT) Cybersecurity Risk Management, Cybersecurity Governance, Cybersecurity Compliance, IT, Maritime Cybersafety, Global Cybersecurity Services (GCS) Domain Leads, Sourcing, Legal, Privacy, and business stakeholders regarding cybersecurity requirements and contractual obligations
Identify opportunities to improve cybersecurity risk management services programs, capabilities, effectiveness, operational resilience, and maturity. Support annual cybersecurity planning, strategic roadmap development, and maturity assessments

Qualification

Required

* Scope: The position supports the global Cybersecurity Risk Management programs (first party and supply chain) and Global Cybersecurity Services to promote effective cybersecurity risk management across the enterprise
* Problem-solving: This position requires strong analytical, communication, stakeholder management, and problem-solving skills
* Impact: Role helps facilitate risk-based decisioning by key stakeholders and the organization. Ability to act as a champion of cybersecurity and risk management best practices
* Leadership: Supports cross-collaboration across Global Cybersecurity Services and the brands
* Knowledge: Understanding of workplace policies and procedures / Familiarity with team collaboration tools and techniques
* Skills: Strong time management and organizational skills
* Abilities: Ability to maintain reliable and consistent attendance / Capacity to be punctual and meet deadlines / Ability to collaborate effectively with colleagues and work as part of a team / Demonstrated professionalism in all interactions and tasks
* Knowledge of governance, risk and compliance (GRC). cybersecurity principles, risk management principles and methodologies, and security control frameworks
* Understanding of security concepts: security awareness, identity and access management (including privileged access, segregation of duties principles, and least privilege principles), vulnerability management, data protection, application security, network security, security architecture, and security operations
* Strong written and verbal communication skills
* Strong analytical, organizational, and documentation skills
* Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, Business Administration, or a related field
* 1-2 years of experience in cybersecurity, information security, IT risk management, governance, or related disciplines
* Knowledge of information technology, cybersecurity and risk management
Travel: No or very little travel likely
Work Conditions: Work primarily in a climate-controlled environment with minimal safety/health hazard potential
Physical Demands: Must be able to remain in a stationary position at a desk and/or computer for extended periods of time
This position is classified as “in-office.” As an in-office role, it requires employees to work from a designated Carnival office in South Florida Monday through Thursday each week. Employees may work from their homes on Fridays. Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area

Preferred

* Professional certifications such as: CRISC (Certified in Risk and Information Systems Control), CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), Security+, CGRC (Certified in Governance, Risk and Compliance)
* Experience with GRC platforms such as LogicGate, Archer or ServiceNow IRM
* Familiarity with regulatory and privacy requirements such as SOX, PCI DSS, GDPR, CCPA, CIS, SEC cybersecurity regulations, or other industry-specific requirements
* Knowledge of third-party risk management and supplier cybersecurity assessments

Benefits

Annual cash bonus program for all non-sales roles
Director and above roles may be eligible to participate in Carnival’s discretionary equity incentive plan
Cost-effective medical, dental and vision plans
Employee Assistance Program and other mental health resources
Company-paid term life insurance and disability coverage
401(k) plan that includes a company match
Employee Stock Purchase plan
Days off for 8 company-wide holidays plus 2 additional floating holidays for all full-time and part-time employees with benefits
Vacation time: full-time employees at the manager and below level start with 14 days per year; director and above level start with 19 days per year
Part-time employees with benefits receive vacation time based on the number of hours they work, with a minimum of 84 hours per year
Additional vacation time with further tenure for all employees
80 hours of sick time each year for all full-time employees
Part-time employees with benefits receive sick time based on the number of hours they work, with a minimum of 60 hours each year
Complementary stand-by cruises
Employee discounts on confirmed cruises
Special rates for family and friends
Personal and professional learning and development resources including tuition reimbursement
On-site fitness center at the Miami campus
In-office work at a designated Carnival office in South Florida Monday through Thursday each week, with the option to work from home on Fridays