Senior Specialist, Cybersecurity Governance
Read straight from Carnival Corporation's careers page, verified 2d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationMiami, FL, United States
Work modehybrid
Typefull-time
SenioritySenior
Experience2–5 yrs
EquityIncluded
Company size10,000+ people
First seenNov 3, 2026 · 2d ago
Verified live2d ago
At a glanceSummarised by Seekless from the posting.
Working knowledge of governance, risk and compliance (GRC), cybersecurity principles, risk management principles and methodologies, and security control frameworks
Understanding of security concepts: security awareness, identity and access management (including privileged access, segregation of duties principles, and least privilege principles), vulnerability management, data protection, application security, network security, security architecture, and security operations
Risk Appetite and Risk Tolerance Alignment
Issue Management and Remediation Oversight
Performance Metrics and Reporting
Governance Document Administration
Excellent written and verbal communication skills
Strong analytical, organizational, and documentation skills
Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, Business Administration, or a related field
2-5 years of experience in cybersecurity, information security, IT risk management, governance, or related disciplines
Experience conducting risk identification, assessment, monitoring and reporting, control reviews, or compliance assessments
Experience developing guidance documentation and senior management reporting
Professional certifications such as: CRISC, CISSP, CISA, Security+, CGRC
Experience with GRC platforms such as LogicGate, Archer or ServiceNow IRM
Familiarity with regulatory and privacy requirements such as SOX, PCI DSS, GDPR, CCPA, CIS, SEC cybersecurity regulations, or other industry-specific requirements
Knowledge of AI security and AI governance best practices
Must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area
Candidates must be authorized to work in the United States
Skills
LogicGate
Archer
ServiceNow IRM
GRC platforms
Benefits
Health insurance
Dental insurance
Vision insurance
Employee assistance program
Mental health resources
Life insurance
Disability coverage
401(k)
Employee stock purchase plan
Paid holidays
Paid vacation
Paid sick time
Cruise benefits
Tuition reimbursement
On site fitness center
About the role
The Senior Specialist, Cybersecurity Governance is responsible for supporting the execution and continuous improvement of the enterprise Cybersecurity Governance Program. This role facilitates cybersecurity governance processes that promote adherence to cybersecurity policies, standards, and control requirements, while enabling effective oversight, accountability, and reporting across the organization. The position supports governance activities including policy and standards management, exception governance, security training initiatives, compliance monitoring, metrics and reporting, and continuous improvement efforts aligned with business objectives and regulatory requirements.
Essential Functions:
•
Develop, maintain, and administer governance documents (cybersecurity policies, standards, procedures, playbooks, frameworks, operating models, and related documentation) ensuring alignment with regulatory requirements, the threat and technology landcape, and organizational objectives. Requires exceptional technical writing, editing, and communication skills.
•
Collaborate with the Cybersecurity Risk Management team, Operational Technology (OT) Cybersecurity Risk Management, Cybersecurity Compliance, IT, Maritime Cybersafety, Global Cybersecurity Services (GCS) Domain Leads, Sourcing, Legal, Privacy, and business stakeholders to deliver cybersecurity governance services.
•
Develop security awareness and training content, including bulletins, e-learning modules, presentations, and communications, leveraging insights from Governance program metrics, Global Cybersecurity Services (GCS) domain initiatives, and the cyber threat landscape.
•
Maintain document repositories/knowledge libraries, governance workflows, version control/change management, approval records, and publication processes to ensure effective policy governance and audit readiness.
•
Identify opportunities to improve cybersecurity governance programs, capabilities, effectiveness, operational resilience, and maturity.
Knowledge, Skills & Abilities:
•
Scope: The position supports the global Cybersecurity Governance programs and Global Cybersecurity Services to promote effective cybersecurity adherence across the enterprise…
•
Problem solving: This position requires strong analytical, communication, stakeholder management, and problem-solving skills.
•
Impact: Facilitates and influences stakeholders to adopt and adhere to cybersecurity policies, standards, and governance processes that support organizational objectives.
•
Leadership: N/A
Essential/Minimum Qualifications:
Core Competencies:
•
Working knowledge of governance, risk and compliance (GRC). cybersecurity principles, risk management principles and methodologies, and security control frameworks.
•
Understanding of security concepts: security awareness, identity and access management (including privileged access, segregation of duties principles, and least privilege principles), vulnerability management, data protection, application security, network security, security architecture, and security operations.
• Risk Appetite and Risk Tolerance Alignment
• Issue Management and Remediation Oversight
• Performance Metrics and Reporting
• Governance Document Administration
• Excellent written and verbal communication skills.
• Strong analytical, organizational, and documentation skills.
Essential Experience Required:
•
Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, Risk Management, Business Administration, or a related field.
•
2-5 years of experience in cybersecurity, information security, IT risk management, governance, or related disciplines.
•
Experience conducting risk identification, assessment. monitoring and reporting, control reviews, or compliance assessments.
•
Experience developing guidance documentation and senior management reporting.
•
Preferred Experience:
•
Professional certifications such as: CRISC (Certified in Risk and Information Systems Control), CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), Security+, CGRC (Certified in Governance, Risk and Compliance)
•
Experience with GRC platforms such as LogicGate, Archer or ServiceNow IRM.
•
Familiarity with regulatory and privacy requirements such as SOX, PCI DSS, GDPR, CCPA, CIS, SEC cybersecurity regulations, or other industry-specific requirements.
•
Knowledge of AI security and AI governance best practices.
Travel: No or very little travel likely
Work Conditions:
Physical Demands:
**This position is classified as “in-office.” As an in-office role, it requires employees to work from a designated Carnival office in South Florida Tuesday through Thursday each week. Employees may work from their homes on Mondays and Fridays. Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area.
Legal
Offers to selected candidates will be made on a fair and equitable basis, taking into account specific job-related skills and experience.
Benefits
At Carnival, your total rewards package is much more than your base salary. All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan. Director and above roles may also be eligible to participate in Carnival’s discretionary equity incentive plan. Plus, Carnival provides comprehensive and innovative benefits to meet your needs, including:
•
Health Benefits:
•
Cost-effective medical, dental and vision plans
•
Employee Assistance Program and other mental health resources
•
Additional programs include company paid term life insurance and disability coverage
•
Financial Benefits:
•
401(k) plan that includes a company match
•
Employee Stock Purchase plan
•
Paid Time Off
•
Holidays – All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee’s discretion.
•
Vacation Time – All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.
•
Sick Time – All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.
•
Other Benefits
•
Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
•
Personal and professional learning and development resources including tuition reimbursement
•
On-site Fitness center at our Miami campus
#Corp
About the company
About Us
Carnival Corporation is the world’s largest leisure travel company, our mission to deliver unforgettable happiness to our guest through our diverse portfolio of leading cruise brands and island destinations, including Carnival Cruise Line, Holland America Line, Princess Cruises, and Seabourn in North America and Australia; P&O Cruises and Cunard Line in the United Kingdom; AIDA in Germany; Costa Cruises in Southern Europe.
Join us and embark on a career that offers not only the chance to grow professionally but also the opportunity to be part of a global community that makes a difference.
In addition to other duties/functions, this position requires full commitment and support for promoting ethical and compliant culture. More specifically, this position requires integrity, honesty, and respectful treatment of others, as well as a willingness to speak up when they see misconduct or have concerns.
Carnival Corporation and Carnival Cruise Line is an equal employment opportunity/affirmative action employer. In this regard, it does not discriminate against any qualified individual on the basis of sex, race, color, national origin, religion, sexual orientation, age, marital status, mental, physical or sensory disability, or any other classification protected by applicable local, state, federal, and/or international law.
https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/eppac.pdf
https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/fmlaen.pdf