Cyber Risk & GRC Analyst

CARNIVAL CRUISE LINES; Miami (FL); Hybrid; USD 85,000 - 120,000; Full time

Benefits offered by this job

Health benefits

401(k) with match

Employee stock purchase plan

Paid time off (PTO)

Sick time

On-site fitness center

Cruise discounts

Job summary

Carnival Cruise Line is seeking a Cybersecurity Risk Specialist to support first and third party risk management programs and governance. You will help monitor inherent and residual risks, assist with mitigation, and prepare executive-level risk reports for leadership.

The role collaborates across Cybersecurity, OT, Compliance, IT, and Legal teams to drive risk-informed decisions, with emphasis on controls, regulatory alignment and enterprise risk appetite.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, IT, Risk Management, Business Administration, or related field.
• 1–2 years of experience in cybersecurity, information security, IT risk management, governance, or related disciplines.
• Knowledge of information technology, cybersecurity and risk management.
• Professional certifications such as CRISC, CISSP, CISA, Security+, CGRC are preferred.
• Experience with GRC platforms (LogicGate, Archer, ServiceNow IRM).
• Familiarity with regulatory and privacy requirements (SOX, PCI DSS, GDPR, CCPA, CIS, SEC cybersecurity regs).
• Knowledge of third‑party risk management and supplier cybersecurity assessments.

Responsibilities

• Support identification, assessment and monitoring of inherent and residual cybersecurity risks (first and third party).
• Assist with mitigation strategies and risk escalation processes.
• Maintain cybersecurity risk registers and ensure risks are identified, documented, updated, tracked and escalated.
• Prepare governance materials, dashboards, scorecards, metrics, and reports for senior leadership.
• Collaborate with Cybersecurity Risk Management, OT Cybersecurity Risk Management, Compliance, IT, Legal, Privacy, and sourcing teams on cybersecurity requirements and obligations.
• Identify opportunities to improve risk management services, capabilities and maturity; support annual planning and roadmap development.

Skills

Risk management

IT governance

Communication

Stakeholder management

Problem solving

Team collaboration

Leadership

Education

Bachelor’s degree in Cybersecurity/Info Sec/IT

Tools

LogicGate

Archer

ServiceNow IRM

Job description

Carnival Cruise Line is seeking a Cybersecurity Risk Specialist to support first and third party risk management programs and governance. You will help monitor inherent and residual risks, assist with mitigation, and prepare executive-level risk reports for leadership.

The role collaborates across Cybersecurity, OT, Compliance, IT, and Legal teams to drive risk-informed decisions, with emphasis on controls, regulatory alignment and enterprise risk appetite.