Global Cybersecurity Supply Chain Risk Program Lead

Carnival Corporation; Miami (FL); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health benefits

401(k) plan with company match

Employee stock purchase plan

Paid time off

Holidays and vacation time

Sick time

On-site fitness center

Job summary

Carnival Corporation is seeking a Cybersecurity Supply Chain Risk Program Manager to drive the global program across brands and operating companies. You will coordinate risk assessments, maintain governance artifacts, and push continuous improvement in risk management across geographies and technology teams.

The role requires strong program management, stakeholder engagement, and the ability to translate risk into actionable actions for executives and technical teams.

Qualifications

• 5+ years of experience in cybersecurity, information security, enterprise risk management, governance, compliance, audit, or related disciplines.
• 3+ years of experience leading enterprise programs or cross-functional initiatives within a complex global organization.

Responsibilities

• Drive the day-to-day execution of the global Cybersecurity Supply Chain Risk Management Program and operations.
• Coordinate risk assessment activities across brands, third-party providers, and initiatives.
• Maintain and improve risk governance documentation, processes, and operating model.
• Facilitate risk review meetings and report risk metrics to leadership.
• Support integration of acquisitions into the enterprise risk management program.

Skills

Program management

Stakeholder management

Risk management

Governance

Cybersecurity principles

Communication

Education

Bachelor's degree in Cybersecurity, Information Security, IT, Risk Management, CS, or related field

Tools

GRC platform

Job description

Carnival Corporation is seeking a Cybersecurity Supply Chain Risk Program Manager to drive the global program across brands and operating companies. You will coordinate risk assessments, maintain governance artifacts, and push continuous improvement in risk management across geographies and technology teams.

The role requires strong program management, stakeholder engagement, and the ability to translate risk into actionable actions for executives and technical teams.