Architect, Cybersecurity, GCS (Corporate)

GCS - Security Architecture

The GCS - Security Architecture function is responsible for the development of technical security design specifications, integration specifications, standards, requirements, and implementation of appropriate technology architectures to mitigate risks to Carnival Corp and customer information assets. This position will work with all global brands as a project resource providing guidance and signing off on project implementations, firewall change requests and provide general guidance on Cybersecurity best practices.

Essential Functions:

• Work with brand IT teams and/or Business stakeholders on their projects to ensure that new systems and/or applications meet security best practices, published minimum security requirements, corporate standards, and policies.
• Provide security architecture and consulting services to business units and IT/OT-Maritime organizations.
• Research, test and implement security tools to scan, monitor and protect computing and networking environments.
• Document and transition security tools to security operations teams.
• Review network designs, applications data flows, system integrations and provide appropriate signoff
• Create high level network designs for GCS security tools and reference architectures documentation
• Review system design of existing applications/systems utilizing a common framework to identify potential vulnerabilities and gaps in the system, helping to mitigate cyber risks and protect sensitive data by proactively addressing potential threats before they can be exploited.
• Build, support and mature GCS security tools and architectural review process
• Develop hardening standards for networking and computing environments using industry best practices.

Knowledge, Skills & Abilities:

• Experience in Security Architecture, designing secure systems and architectures that can withstand cyber threats. Ability to communicate Cyber security architecture in non-technical terms to business stakeholders. Understanding of AI related Cybersecurity risks. Understanding of OT (Operational Technology) Cybersecurity risks.
• Creating, evaluating, and managing security architectures that align with business goals. Translating technical needs for stakeholders to resolve conflicts and gain agreement on solutions that align with Cybersecurity best practices and enterprise Standards and Policies.
• Contribute to technical designs that enforce secure, resilient, and compliant technology infrastructures that protect critical data.

Qualifications:

• Bachelor's degree in Cyber Security (Master's degree a plus). Recognized industry Cybersecurity Certifications such as CISSP.
• Cloud environment (Azure, AWS, GCP) security and design. Application/Web/API/Container Security. Extensive knowledge of Windows, Linux, Network and Cloud Security and Cybersecurity best practices. Understanding of IAM and Least Privileged access models.
• 5+ Cyber Security in Large Enterprise setting
• Solid understanding of Cybersecurity risks in architectural designs and recommending mitigating controls. Key experience should includes cloud security (Azure/AWS/GCP), identity and access management (IAM), network segmentation, encryption, threat modeling within Enterprise IT and OT environments. Strong communication and strategic leadership skills are vital for aligning security with business goals.

Travel: Less than 25% with shipboard travel likely

Work Conditions: Work primarily in a climate-controlled environment with minimal safety/health hazard potential.

Physical Demands: Must be able to remain in a stationary position at a desk and/or computer for extended periods of time.

This position is classified as "in-office." As an in-office role, it requires employees to work from a designated Carnival office in South Florida Monday through Thursday each week. Employees may work from their homes on Fridays. Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area.

Offers to selected candidates will be made on a fair and equitable basis, taking into account specific job-related skills and experience.

At Carnival, your total rewards package is much more than your base salary. All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan. Director and above roles may also be eligible to participate in Carnival's discretionary equity incentive plan. Plus, Carnival provides comprehensive and innovative benefits to meet your needs, including:

• Health Benefits:
  • Cost-effective medical, dental and vision plans
  • Employee Assistance Program and other mental health resources
  • Additional programs include company paid term life insurance and disability coverage
• Financial Benefits:
  • 401(k) plan that includes a company match
  • Employee Stock Purchase plan
• Paid Time Off
  • Holidays – All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee's discretion.
  • Vacation Time – All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.
  • Sick Time – All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.
• Other Benefits
  • Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
  • Personal and professional learning and development resources including tuition reimbursement
  • On-site Fitness center at our Miami campus