Global Cybersecurity Supply Chain Risk Program Manager

Carnival Corporation & plc; Miami (FL); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Paid time off

On-site Fitness center

Job summary

Carnival Corporation & plc is seeking a Cybersecurity Supply Chain Risk Program Manager to drive the global program, coordinate risk assessments across brands and vendors, and continuously improve governance, reporting, and risk management capabilities.

This in-office role requires collaboration with Governance, Compliance, IT, Legal, Privacy, Internal Audit, Sourcing, and business leadership to align risk practices with the enterprise cybersecurity strategy across a multinational portfolio.

Qualifications

• Bachelor's degree in cybersecurity, information security, IT, risk management, CS or related field.
• Strong understanding of cybersecurity principles, governance, and control frameworks.
• Excellent communication, facilitation, organizational, and stakeholder management skills.

Responsibilities

• Drive day-to-day execution of the global Cybersecurity Supply Chain Risk Management Program.
• Coordinate risk assessments across brands, vendors, and initiatives.
• Develop and maintain the cybersecurity supply chain risk management framework, operating model, processes, procedures and governance documentation.
• Produce executive dashboards and risk reports (KRIs/KPIs) for leadership.
• Support audits and third-party risk management activities.

Skills

Program management

Stakeholder engagement

Analytical thinking

Communication skills

Leadership

Team collaboration

Education

Bachelor’s degree in Cybersecurity/Information Security/IT/Risk Management/CS/Business Administration or related field

Job description

Carnival Corporation & plc is seeking a Cybersecurity Supply Chain Risk Program Manager to drive the global program, coordinate risk assessments across brands and vendors, and continuously improve governance, reporting, and risk management capabilities.

This in-office role requires collaboration with Governance, Compliance, IT, Legal, Privacy, Internal Audit, Sourcing, and business leadership to align risk practices with the enterprise cybersecurity strategy across a multinational portfolio.