Strategic Cyber Risk Management Specialist

Carnival Corporation; Miami (FL); On-site; USD 85,000 - 125,000; Full time

Benefits offered by this job

Health benefits

401(k) with company match

Paid time off

Employee discounts

Tuition reimbursement

Job summary

Carnival Corporation is seeking a Cybersecurity Risk Specialist to support first- and third-party risk management across the enterprise. The role helps identify, assess, and report cybersecurity risks aligned with business objectives and regulatory requirements, collaborating with IT, OT cybersecurity, governance, and sourcing teams.

The ideal candidate has knowledge of GRC, risk management, and security controls; 1–2 years in cybersecurity; professional certifications preferred.

Qualifications

• Bachelor’s degree in cybersecurity, information security, or a related field.
• 1–2 years of cybersecurity or IT risk management experience.
• Knowledge of GRC concepts, security controls, and frameworks.
• Certifications such as CRISC, CISSP, CISA, Security+ preferred.
• Experience with GRC tools like LogicGate, Archer or ServiceNow IRM.

Responsibilities

• Identify, assess and monitor first- and third-party cybersecurity risks and mitigation.
• Maintain risk registers, track risks and escalate as needed.
• Prepare governance materials, executive dashboards, metrics and reports.
• Collaborate across Cybersecurity Risk Management, IT, Legal, Privacy and sourcing teams.
• Support annual planning, roadmaps and maturity assessments.

Skills

Problem-solving

Communication

Stakeholder management

Analytical thinking

Team collaboration

Leadership

Education

Bachelor's degree

Tools

GRC tools (LogicGate, Archer, ServiceNow IRM)

Job description

Carnival Corporation is seeking a Cybersecurity Risk Specialist to support first- and third-party risk management across the enterprise. The role helps identify, assess, and report cybersecurity risks aligned with business objectives and regulatory requirements, collaborating with IT, OT cybersecurity, governance, and sourcing teams.

The ideal candidate has knowledge of GRC, risk management, and security controls; 1–2 years in cybersecurity; professional certifications preferred.