Brand Cybersecurity Director & BISO Leader

Carnival Corporation; Miami (FL); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Health benefits

401(k) with company match

Employee Stock Purchase plan

Paid time off and holidays

On-site fitness center in Miami area

Job summary

Carnival Corporation seeks a Director, Brand Information Security Officer (BISO) to lead cybersecurity strategy for the assigned brand, aligning it with corporate security objectives and GCS services.

The role acts as the senior liaison between Global Cybersecurity Services, technology leadership, and business stakeholders to deliver measurable security and business outcomes across governance, risk, incident response, vulnerability management, and service delivery.

Qualifications

• Bachelor’s degree in Information Security or related field; master’s preferred.
• 10+ years in cybersecurity leadership within large, complex organizations.
• Certifications such as CISSP, CISM, CISA, CCSP preferred.

Responsibilities

• Lead brand cybersecurity strategy and governance aligned to corporate and GCS objectives.
• Oversee vulnerability management, incident remediation, and reporting.
• Deliver GCS services, gather, validate and communicate requirements.
• Advise business and technology leadership to drive secure, pragmatic solutions.
• Promote cross-functional collaboration and change management to meet security goals.
• Drive continuous improvement of security maturity and metrics.

Skills

Security governance

Risk management

Compliance

Privacy

Data protection

IAM

Security operations

Vulnerability management

Incident response

GRC

Education

Bachelor's degree in Information Security

Master’s degree preferred

CISSP / CISM / CISA / CCSP preferred

Job description

Carnival Corporation seeks a Director, Brand Information Security Officer (BISO) to lead cybersecurity strategy for the assigned brand, aligning it with corporate security objectives and GCS services.

The role acts as the senior liaison between Global Cybersecurity Services, technology leadership, and business stakeholders to deliver measurable security and business outcomes across governance, risk, incident response, vulnerability management, and service delivery.