Cybersecurity Risk Lead — Hybrid (Fri Remote)

Carnival Corporation; Miami (FL); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health Benefits

401(k) plan

Paid Time Off

Other Benefits

Job summary

Carnival Corporation & plc is seeking a Senior Specialist, Cybersecurity Risk to drive the enterprise cybersecurity risk management program from its Miami office. The role requires coordinating risk assessments across information systems, OT, applications, supply chain, and business initiatives, and reporting risk to senior leadership in clear business terms.

The ideal candidate will have strong knowledge of GRC, controls, and risk reporting, plus experience with frameworks and KRIs.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, IT, or a related field.
• 2–5 years of cybersecurity risk experience.
• Experience with risk assessments, risk registers, and reporting.
• Certifications such as CRISC, CISSP, CISA or Security+ are preferred.

Responsibilities

• Identify, evaluate and monitor inherent and residual risks; support mitigation and escalation.
• Maintain cybersecurity risk registers and report on KRIs/KPIs.
• Develop and maintain Cybersecurity Risk Management Framework and playbooks.
• Collaborate with IT, Legal, Privacy, Sourcing and business stakeholders.
• Support annual cybersecurity planning and maturity assessments.
• Communicate risk in business terms to non-technical stakeholders.

Skills

GRC principles

Cybersecurity governance

Communication & stakeholders

Problem-solving

Leadership & collaboration

Education

Bachelor’s degree in Cybersecurity/Information Security

Tools

LogicGate

Archer

ServiceNow IRM

Job description

Carnival Corporation & plc is seeking a Senior Specialist, Cybersecurity Risk to drive the enterprise cybersecurity risk management program from its Miami office. The role requires coordinating risk assessments across information systems, OT, applications, supply chain, and business initiatives, and reporting risk to senior leadership in clear business terms.

The ideal candidate will have strong knowledge of GRC, controls, and risk reporting, plus experience with frameworks and KRIs.