Cybersecurity Risk Specialist — Hybrid/Remote

Carnival Cruise Line; Miami (FL); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health Benefits

401(k) plan with company match

Paid Time Off

Holidays with benefits

Employee discounts on cruises

Tuition reimbursement

On-site Fitness center

Job summary

Carnival Cruise Line is seeking a Cybersecurity Risk Specialist to support first-party and third-party risk programs. You will help manage risk, maintain risk registers, and prepare governance materials aligned with business objectives and regulatory requirements.

You will collaborate with IT, OT, governance, compliance, legal and business stakeholders to drive risk reporting, KRIs, KPIs and maturity assessments across the enterprise.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, IT Risk Management or related field.
• 1–2 years of experience in cybersecurity, information security, IT risk management or related disciplines.
• Knowledge of information technology, cybersecurity and risk management.
• Preferred certifications: CRISC, CISSP, CISA, Security+, CGRC.
• Familiarity with GRC platforms and regulatory/privacy requirements.

Responsibilities

• Support identification, assessment and monitoring of inherent and residual cybersecurity risks (first and third party).
• Help maintain cybersecurity risk registers and track mitigation activities.
• Prepare governance materials, dashboards, scorecards and reports for senior leadership.
• Collaborate across Cybersecurity Risk Management, IT, Legal, Privacy and business stakeholders on requirements and obligations.
• Identify opportunities to improve risk management services, planning and maturity.

Skills

GRC knowledge

Cybersecurity risk management

Stakeholder management

Problem solving

Communication skills

Education

Bachelor’s degree in Cybersecurity or related field

Tools

LogicGate

Archer

ServiceNow IRM

Job description

Carnival Cruise Line is seeking a Cybersecurity Risk Specialist to support first-party and third-party risk programs. You will help manage risk, maintain risk registers, and prepare governance materials aligned with business objectives and regulatory requirements.

You will collaborate with IT, OT, governance, compliance, legal and business stakeholders to drive risk reporting, KRIs, KPIs and maturity assessments across the enterprise.