Global Cybersecurity Governance Lead

Carnival Cruise Line; Miami (FL); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Annual bonus program

Equity incentive plan

Health benefits

Paid time off

Job summary

Carnival Cruise Line is seeking a Cybersecurity Governance Program Manager to lead the enterprise governance program across a global portfolio of brands. You will partner with stakeholders to develop standards, track maturity, and enable risk-aware decision making.

This in-office role in South Florida requires strong communication, program management, and the ability to collaborate across IT, Risk, Legal, and Privacy teams to advance governance capabilities and operational resilience.

Qualifications

• Knowledge of governance, risk and compliance (GRC), cybersecurity principles, risk management methodologies, and security control frameworks.
• Understanding of security concepts: security awareness, identity and access management (including privileged access, separation of duties principles, and least privilege principles), vulnerability management, data protection, application security, network security, security architecture, and security operations.
• Strong written and verbal communication skills.
• Project management skills
• Process improvement and operational excellence
• Technical policy editing, writing, and evaluation

Responsibilities

• Establish, facilitate, and continuously enhance partnerships with key stakeholders to execute the Governance Program (standards and policies development, policy exceptions, security training and simulations, etc); serving as the primary SME and liaison between Security Governance and brands while advancing governance frameworks and processes.
• Manage completion, reporting, and mitigations of cybersecurity maturity assessments to evaluate program effectiveness, identify improvement opportunities, and track GCS and Brand actions against target-state capabilities. Support annual cybersecurity planning, strategic roadmap development. Manage the lifecycle of cybersecurity governance tools and service providers, including requirements gathering, performance monitoring, and continuous improvement.
• Drive development, maintenance, and reporting of cybersecurity governance metrics and KPIs to measure program effectiveness and policy and standards adherence. Prepare executive-level dashboards, reports, and presentations that provide actionable insights, support security and standards enforcement, and communicate cybersecurity governance performance and efficacy to senior leadership and executive committees.
• Collaborate with the Cybersecurity Risk Management team, Operational Technology (OT) Cybersecurity Risk Management, Cybersecurity Compliance, IT, Maritime Cybersafety, Global Cybersecurity Services (GCS) Domain Leads, Sourcing, Legal, Privacy, and business stakeholders to deliver cybersecurity governance services.
• Identify opportunities to improve cybersecurity governance programs, capabilities, effectiveness, operational resilience, and maturity.

Skills

GRC knowledge

Cybersecurity risk mgmt

Security concepts

Written & verbal comms

Project management

Process improvement

Job description

Carnival Cruise Line is seeking a Cybersecurity Governance Program Manager to lead the enterprise governance program across a global portfolio of brands. You will partner with stakeholders to develop standards, track maturity, and enable risk-aware decision making.

This in-office role in South Florida requires strong communication, program management, and the ability to collaborate across IT, Risk, Legal, and Privacy teams to advance governance capabilities and operational resilience.