Specialist, Cybersecurity Governance

Responsibilities

• Use security awareness platforms and phishing simulation tools to plan, execute, analyze, and continuously improve phishing, smishing, vishing, and deepfake resilience initiatives focused on reducing human risk.
• Contribute to security awareness and training content, including bulletins, e-learning modules, presentations, and communications, using insights from governance program metrics, Global Cybersecurity Services (GCS) domain initiatives, and the cyber threat landscape.
• Support cybersecurity maturity assessments, including completion, reporting, and mitigations, to evaluate program effectiveness, surface improvement opportunities, and track GCS and Brand actions against target-state capabilities.
• Collaborate with the Cybersecurity Risk Management team, Operational Technology (OT) Cybersecurity Risk Management, Cybersecurity Compliance, IT, Maritime Cybersafety, Global Cybersecurity Services (GCS) Domain Leads, Sourcing, Legal, Privacy, and business stakeholders to deliver governance services.
• Identify opportunities to enhance cybersecurity governance programs, capabilities, effectiveness, operational resilience, and maturity.

Requirements

• Knowledge of governance, risk, and compliance (GRC), including cybersecurity principles, risk management principles and methodologies, and security control frameworks.
• Understanding of security concepts such as security awareness, identity and access management (including privileged access, segregation of duties principles, and least privilege principles), vulnerability management, data protection, application security, network security, security architecture, and security operations.
• Strong written and verbal communication skills.
• Strong analytical, organizational, and documentation skills.
• Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, Business Administration, or a related field.
• 1–2 years of experience in cybersecurity, information security, IT risk management, governance, or related disciplines.
• Knowledge of information technology, cybersecurity, and risk management.

Tools & Technologies

• LogicGate
• Archer
• ServiceNow IRM

Preferred Experience

• Professional certifications such as CRISC, CISSP, CISA, Security+, CGRC.
• Experience with GRC platforms including LogicGate, Archer, or ServiceNow IRM.
• Familiarity with regulatory and privacy requirements such as SOX, PCI DSS, GDPR, CCPA, CIS, and SEC cybersecurity regulations, or other industry-specific requirements.
• Knowledge of AI security and AI governance best practices.

Work Location & Travel

• This position is classified as in-office.
• Requires working from a designated Carnival office in South Florida Monday through Thursday.
• Employees may work from home on Fridays.
• No or very little travel is likely.
• Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area.

Benefits

• Cost-effective medical, dental, and vision plans
• Employee Assistance Program and other mental health resources
• Company paid term life insurance and disability coverage
• 401(k) plan with a company match
• Employee Stock Purchase plan
• Days off for 8 company-wide holidays plus 2 additional floating holidays
• Vacation time: 14 days/year for full-time employees at the manager and below level; 19 days/year for director and above level
• Sick time: 80 hours of sick time each year for full-time employees
• Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
• Personal and professional learning and development resources, including tuition reimbursement
• On-site Fitness center at the Miami campus