Cybersecurity Governance Pro | GRC & Risk Mgmt

CARNIVAL CRUISE LINES; Miami (FL); On-site; USD 65,000 - 90,000; Full time

Job summary

Carnival Cruise Lines is seeking a cybersecurity governance professional to support global Governance programs and Global Cybersecurity Services. You will collaborate with risk management, compliance, IT and business stakeholders to deliver governance services, drive awareness initiatives, and evaluate program effectiveness.

Qualified candidates hold a bachelor’s in a related field, 1–2 years in cybersecurity or risk management, and relevant certifications (CRISC, CISSP, CISA, Security+, CGRC).

Qualifications

• Knowledge of governance, risk and compliance (GRC), cybersecurity principles and risk methodologies.
• Strong written and verbal communication skills.
• Experience with security concepts: IAM, vulnerability management, data protection, network security, security operations.
• Detail-oriented with strong organizational skills.

Responsibilities

• Plan, execute, analyze and improve phishing, smishing, vishing and deepfake resilience and human risk reduction initiatives.
• Contribute to security awareness content (bulletins, e-learning, presentations) leveraging governance metrics and threat landscape.
• Support maturity assessments and track actions against target-state capabilities.
• Collaborate with Cybersecurity Risk Management and other teams to deliver governance services.
• Identify opportunities to improve governance programs, capabilities and operational resilience.

Skills

GRC knowledge

Analytical thinking

Communication skills

Stakeholder management

Detail oriented

Education

Bachelor's degree in cybersecurity or related field

Tools

LogicGate

Archer

ServiceNow IRM

Job description

Carnival Cruise Lines is seeking a cybersecurity governance professional to support global Governance programs and Global Cybersecurity Services. You will collaborate with risk management, compliance, IT and business stakeholders to deliver governance services, drive awareness initiatives, and evaluate program effectiveness.

Qualified candidates hold a bachelor’s in a related field, 1–2 years in cybersecurity or risk management, and relevant certifications (CRISC, CISSP, CISA, Security+, CGRC).