Specialist, Cybersecurity Risk

Carnival Corporation is a global leisure travel company operating a diverse portfolio of cruise brands and destinations. The Cybersecurity Risk Specialist supports first-party and third-party cybersecurity risk management, including risk assessments, risk registers, reporting, mitigation monitoring, governance materials, and cybersecurity program improvement.

What you'll do:

• Support the identification, assessment and monitoring of inherent and residual cybersecurity risks (first and third party), help recommend mitigation strategies, assist with monitoring mitigation activities, and support risk escalation and acceptance processes
• Support the maintenance of cybersecurity risk registers and help ensure risks are appropriately identified, documented, updated, tracked, and escalated. Assist in identifying emerging threats, trends, and systemic risks that may impact organizational objectives
• Support enterprise risk management integration and cybersecurity risk reporting activities. Monitor cybersecurity key risk indicators (KRIs), key performance indicators (KPIs), and programming maturity metrics. Prepare governance and risk management materials, executive dashboards, scorecards, metrics, and reports for senior leadership and business stakeholders
• Collaborate with Cybersecurity Risk Management team, Operational Technology (OT) Cybersecurity Risk Management, Cybersecurity Governance, Cybersecurity Compliance, IT, Maritime Cybersafety, Global Cybersecurity Services (GCS) Domain Leads, Sourcing, Legal, Privacy, and business stakeholders regarding cybersecurity requirements and contractual obligations
• Identify opportunities to improve cybersecurity risk management services programs, capabilities, effectiveness, operational resilience, and maturity. Support annual cybersecurity planning, strategic roadmap development, and maturity assessments

What they're looking for:

• * Scope: The position supports the global Cybersecurity Risk Management programs (first party and supply chain) and Global Cybersecurity Services to promote effective cybersecurity risk management across the enterprise
• * Problem-solving: This position requires strong analytical, communication, stakeholder management, and problem-solving skills
• * Impact: Role helps facilitate risk-based decisioning by key stakeholders and the organization. Ability to act as a champion of cybersecurity and risk management best practices
• * Leadership: Supports cross-collaboration across Global Cybersecurity Services and the brands
• * Knowledge: Understanding of workplace policies and procedures / Familiarity with team collaboration tools and techniques
• * Skills: Strong time management and organizational skills
• * Abilities: Ability to maintain reliable and consistent attendance / Capacity to be punctual and meet deadlines / Ability to collaborate effectively with colleagues and work as part of a team / Demonstrated professionalism in all interactions and tasks
• * Knowledge of governance, risk and compliance (GRC). cybersecurity principles, risk management principles and methodologies, and security control frameworks
• * Understanding of security concepts: security awareness, identity and access management (including privileged access, segregation of duties principles, and least privilege principles), vulnerability management, data protection, application security, network security, security architecture, and security operations
• * Strong written and verbal communication skills
• * Strong analytical, organizational, and documentation skills
• * Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, Business Administration, or a related field

Benefits:

• Annual cash bonus program for all non-sales roles
• Director and above roles may be eligible to participate in Carnival’s discretionary equity incentive plan
• Cost-effective medical, dental and vision plans
• Employee Assistance Program and other mental health resources
• Company-paid term life insurance and disability coverage
• 401(k) plan that includes a company match
• Employee Stock Purchase plan
• Days off for 8 company-wide holidays plus 2 additional floating holidays for all full-time and part-time employees with benefits
• Vacation time: full-time employees at the manager and below level start with 14 days per year; director and above level start with 19 days per year
• Part-time employees with benefits receive vacation time based on the number of hours they work, with a minimum of 84 hours per year