Director, Cyber Security: Attack Surface & Vulnerability

Royal Caribbean Group; Miami (FL); On-site; USD 180,000 - 240,000; Full time

Job summary

Royal Caribbean Group is seeking a seasoned Director of Cyber Security Counter Threat Management to lead Attack Surface and Vulnerability Management across global assets, including on-prem and shipboard environments.

The role requires executive-level communication, strong leadership of managers and security SMEs, and the ability to balance security risk reduction with business operations and enablement in a complex, travel-focused organization.

Qualifications

• Bachelor’s degree in Computer Science, Cyber Security, Information Technology, Engineering, or a similar technical discipline; advanced degree preferred.
• 10+ years of experience in information technology.
• 6+ years of experience in attack surface management, vulnerability management, infrastructure security, security engineering, or cloud security roles.
• Demonstrated experience leading Managers and highly technical security SMEs
• Broad and deep understanding of cyber-security threats, vulnerabilities, exploitability, controls, remediation strategies, and exposure management practices.
• Strong technical knowledge in IT including hardware, networking, OS, cloud services, APIs, and enterprise platforms.
• Ability to communicate complex issues to diverse audiences including engineers, operators, stakeholders, executives, auditors, regulators.
• Strong decision-making capabilities balancing costs and benefits with business impact.

Responsibilities

• Lead managers and highly technical security SMEs responsible for attack surface discovery & hardening.
• Set enterprise strategy, direction, roadmap, and operating model for Attack Surface Management & Vulnerability Management.
• Serve as an executive escalation point for remediation challenges, high-risk vulnerabilities, policy exceptions, and business-impacting security decisions.
• Technical mentorship - develop talent and professional skills within the team.
• Partner with BISOs, Digital, IT, product, engineering, cloud, shipboard technology, and business leaders to drive risk reduction while enabling business outcomes.
• Establish risk-based prioritization models that account for exploitability, asset criticality, business impact, regulatory expectations, and constraints.
• Produce and track KPIs and risk indicators to demonstrate improvements in vulnerabilities, configuration issues, coverage, and exposure reduction.
• Drive automation of ASM workflows using scripting, orchestration, APIs, AI-enabled workflows, and agentic AI to improve scale and speed.

Skills

Attack Surface Management

Vulnerability Management

Security Leadership

Cloud Security

Executive Communication

Risk Management

Automation & Scripting

Education

Bachelor’s degree in Computer Science, Cyber Security, Information Technology, Engineering, or related field

Tools

APIs

Automation tools

Job description

Royal Caribbean Group is seeking a seasoned Director of Cyber Security Counter Threat Management to lead Attack Surface and Vulnerability Management across global assets, including on-prem and shipboard environments.

The role requires executive-level communication, strong leadership of managers and security SMEs, and the ability to balance security risk reduction with business operations and enablement in a complex, travel-focused organization.