Senior Cybersecurity Risk & GRC Lead

CARNIVAL CRUISE LINES; Miami (FL); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health benefits

Paid time off

Employee discounts

Job summary

Carnival Cruise Lines seeks a Senior Specialist, Cybersecurity Risk to drive the enterprise cybersecurity risk management program. The role partners with IT, OT, privacy, legal, and business stakeholders to translate risk into actionable decisions and align with business objectives, regulatory requirements, and risk appetite.

Responsibilities include identifying risks, maintaining risk registers, developing governance playbooks, and producing risk scorecards for senior leadership.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, IT, CS, Risk Management, Business Administration, or related field.
• 2-5 years of experience in cybersecurity, information security, IT risk management, governance, or related disciplines.
• Experience conducting risk identification, assessment, monitoring and reporting, control reviews, or compliance assessments.
• Experience developing guidance documentation and senior management reporting.
• Professional certifications such as CRISC, CISSP, CISA, Security+, CGRC are preferred.
• Experience with GRC platforms such as LogicGate, Archer or ServiceNow IRM.
• Familiarity with regulatory and privacy requirements such as SOX, PCI DSS, GDPR, CCPA, CIS, SEC cybersecurity regulations.

Responsibilities

• Identify, evaluate and monitor inherent and residual risks, recommend mitigation strategies, monitor mitigation activities, and support risk escalation and acceptance processes.
• Maintain cybersecurity risk registers and ensure risks are identified, documented, updated, tracked, and escalated.
• Support enterprise risk management integration and cybersecurity risk reporting activities; monitor KRIs and KPIs.
• Develop and revise Cybersecurity Risk Management Framework, playbooks, procedures, guidelines, and templates.
• Collaborate with multiple stakeholders regarding cybersecurity requirements and contractual obligations; communicate risk in business terms.
• Identify opportunities to improve governance and risk management services and support annual planning.

Skills

Risk management

GRC

Stakeholder management

Analytical skills

Communication

Problem-solving

Leadership

Documentation

Education

Bachelor's degree in Cybersecurity, Information Security, IT, Computer Science, Risk Management, Business Administration, or related field

Tools

LogicGate

Archer

ServiceNow IRM

Job description

Carnival Cruise Lines seeks a Senior Specialist, Cybersecurity Risk to drive the enterprise cybersecurity risk management program. The role partners with IT, OT, privacy, legal, and business stakeholders to translate risk into actionable decisions and align with business objectives, regulatory requirements, and risk appetite.

Responsibilities include identifying risks, maintaining risk registers, developing governance playbooks, and producing risk scorecards for senior leadership.