Global Cyber Risk Program Lead

Carnival Corporation; Miami (FL); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Health Benefits

401(k) Plan

Paid Time Off

On-site Fitness Center

Job summary

Carnival Corporation in South Florida is seeking a Cybersecurity Risk Program Manager to lead the enterprise risk program across global brands. This in-office role collaborates with Governance, Compliance, IT, Privacy, Legal, Internal Audit, Sourcing and business leadership to drive a consistent, risk-based cybersecurity posture.

You will manage risk registers, coordinate risk assessments, report metrics to executives, and advance governance through automation and best practices.

Qualifications

• Bachelor’s degree in a relevant field as listed above.
• Strong understanding of cybersecurity principles, governance processes and control frameworks.
• Excellent communication, facilitation, organizational and stakeholder management skills.
• 5+ years in cybersecurity, information security, enterprise risk management, governance or audit.

Responsibilities

• Drive day-to-day execution of the global Cybersecurity Risk Management Program.
• Coordinate enterprise cybersecurity risk assessments across applications, infra, cloud, OT, third parties and initiatives.
• Maintain risk registers and track remediation, acceptance and mitigation progress.
• Facilitate risk review meetings with stakeholders and executives.
• Support governance, compliance, and continuous improvement initiatives across the program.

Skills

Program management

Stakeholder engagement

Cybersecurity risk

Risk governance

Cross-brand coordination

Education

Bachelor’s degree in Cybersecurity, Information Security, IT, Risk Management, CS, or related field

Tools

GRC platforms

Job description

Carnival Corporation in South Florida is seeking a Cybersecurity Risk Program Manager to lead the enterprise risk program across global brands. This in-office role collaborates with Governance, Compliance, IT, Privacy, Legal, Internal Audit, Sourcing and business leadership to drive a consistent, risk-based cybersecurity posture.

You will manage risk registers, coordinate risk assessments, report metrics to executives, and advance governance through automation and best practices.