Program Manager, Cybersecurity Governance

The Cybersecurity Governance Program Manager is responsible for leading the development, delivery, maturation, and continuous improvement of the enterprise Cybersecurity Governance Program across a global portfolio of operating companies and brands. This role serves as the central driver for coordinating, facilitating, and overseeing cybersecurity governance activities across multiple business units, geographic regions, and technology organizations. Mission of providing exceptional guest experiences and fostering employee growth.

Essential Functions:

• Establish, facilitate, and continuously enhance partnerships and workflows with key stakeholders to execute the Governance Program (standards and policies development, policy exceptions, security training and simulations, etc); serving as the primary SME and liaison between Security Governance and brands while advancing governance frameworks and processes.

• Manage completion, reporting, and mitigations of cybersecurity maturity assessments to evaluate program effectiveness, identify improvement opportunities, and track GCS and Brand actions against target-state capabilities. Support annual cybersecurity planning, strategic roadmap development. Manage the lifecycle of cybersecurity governance tools and service providers, including requirements gathering, performance monitoring, and continuous improvement.

• Drive development, maintenance, and reporting of cybersecurity governance metrics and key performance indicators (KPIs) to measure program effectiveness and policy and standards adherence. Prepare executive-level dashboards, reports, and presentations that provide actionable insights, support security and standards enforcement, and communicate cybersecurity governance performance and efficacy to senior leadership and executive committees.

• Collaborate with the Cybersecurity Risk Management team, Operational Technology (OT) Cybersecurity Risk Management, Cybersecurity Compliance, IT, Maritime Cybersafety, Global Cybersecurity Services (GCS) Domain Leads, Sourcing, Legal, Privacy, and business stakeholders to deliver cybersecurity governance services.

• Identify opportunities to improve cybersecurity governance programs, capabilities, effectiveness, operational resilience, and maturity.

Knowledge, Skills & Abilities:

• Scope:The position supports the global Cybersecurity Governance programs and Global Cybersecurity Services to promote effective cybersecurity adherence across the enterprise.

• Problem solving: This position requires strong analytical, communication, stakeholder management, and problem-solving skills.

• Impact:Facilitates and influences stakeholders to adopt and adhere to cybersecurity policies, standards, and governance processes that support organizational objectives.

• Leadership:N/A

Essential/Minimum Qualifications:

Core Competencies:

• Knowledge of governance, risk and compliance (GRC). cybersecurity principles, risk management principles and methodologies, and security control frameworks.

• Understanding of security concepts: security awareness, identity and access management (including privileged access, segregation of duties principles, and least privilege principles), vulnerability management, data protection, application security, network security, security architecture, and security operations.

• Strong written and verbal communication skills.

• Project Management skills

• Process improvement and operational excellence

• Technical policy editing, writing, and evaluation

Essential Experience Required:

Travel: No or very little travel likely

Work Conditions:

Physical Demands:

**This position is classified as “in-office.” As an in-office role, it requires employees to work from a designated Carnival office in South Florida Tuesday through Thursday each week. Employees may work from their homes on Mondays and Fridays. Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area.

Offers to selected candidates will be made on a fair and equitable basis, taking into account specific job-related skills and experience.

At Carnival, your total rewards package is much more than your base salary. All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan. Director and above roles may also be eligible to participate in Carnival’s discretionary equity incentive plan. Plus, Carnival provides comprehensive and innovative benefits to meet your needs, including:

• Health Benefits:
  • Cost-effective medical, dental and vision plans
  • Employee Assistance Program and other mental health resources
  • Additional programs include company paid term life insurance and disability coverage
• Financial Benefits:
  • 401(k) plan that includes a company match
  • Employee Stock Purchase plan
• Paid Time Off
  • Holidays - All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee’s discretion.
  • Vacation Time - All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.
  • Sick Time - All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.
• Other Benefits
  • Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
  • Personal and professional learning and development resources including tuition reimbursement
  • On-site Fitness center at our Miami campus