Senior Cybersecurity Governance Specialist – Hybrid/Remote

Carnival Corporation; Miami (FL); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health Benefits

401(k) plan with company match

Paid time off and holidays

Employee discounts on cruises

Tuition reimbursement

On-site Fitness center

Job summary

Carnival Corporation is seeking a Senior Specialist, Cybersecurity Governance to support the enterprise governance program and ensure adherence to policies, standards, and controls. You will work across IT, risk, privacy, and business units to drive governance services and reporting.

Responsibilities include policy development, training content creation, metrics, and continuous improvement aligned with regulatory requirements and business objectives.

Qualifications

• Bachelor's degree or higher in a related field.
• 2-5 years of cybersecurity, information security, IT risk management, governance, or related disciplines.
• Experience with risk identification, assessment, monitoring and reporting.

Responsibilities

• Develop, maintain, and administer governance documents (policies, standards, procedures, playbooks) ensuring regulatory alignment.
• Collaborate with risk mgmt, IT, privacy, and business stakeholders to deliver governance services.
• Develop security awareness content and training materials based on metrics and threat landscape.
• Maintain document repositories, governance workflows, and audit readiness.
• Identify opportunities to improve governance programs and maturity.

Skills

GRC Knowledge

Policy Writing

Stakeholder Management

Technical Writing

Communication Skills

Risk Management

Education

Bachelor's degree in Cybersecurity, IT, or related field

Tools

LogicGate

Archer

ServiceNow IRM

Job description

Carnival Corporation is seeking a Senior Specialist, Cybersecurity Governance to support the enterprise governance program and ensure adherence to policies, standards, and controls. You will work across IT, risk, privacy, and business units to drive governance services and reporting.

Responsibilities include policy development, training content creation, metrics, and continuous improvement aligned with regulatory requirements and business objectives.