Cybersecurity Compliance Supervisor

The Supervisor, Cybersecurity Compliance leverages their strong knowledge and expertise to supervise the overall Global Compliance Program. They possess a sound understanding of regulatory needs such as SOX, PCI-DSS, Data Privacy (GDPR/CCPA, etc.) and best practices from NIST CSF, ISO, SOC2, etc., with an emphasis on SOX. The supervisor will serve as a liaison between various Operating Units within the organization, internal & external audit, and IT teams, ensuring effective coordination and communication. They will do so to integrate compliance regulations and controls that will protect the company assets and data globally. The supervisor will actively participate in the day-to-day operations of the Security Compliance team within the Global Cybersecurity Services (GCS) organization and will coordinate tasks such as resource allocation, team training, project facilitation, scheduling, and organization of overall project health to complete deliverables. This position will have an active role in ensuring global compliance within the organization to all current regulatory guidelines and to GCS policies and standards. The supervisor will oversee a team of Compliance Analysts that are responsible for the execution of regulatory control testing and continuing compliance activities. This team of analysts has a deep background in Information Security and Compliance. In working with the team, the supervisor will partake in the planning and performance of annual assessments, testing, validation, and oversight of risk management. The supervisor will conduct a root cause analysis as needed, to determine root causes and lead corrective action efforts at the process level to ensure gaps are appropriately assessed, escalated & resolved. This includes oversight of implementing right process solutions to prevent recurrence. The supervisor will represent the Security Compliance team in cross-functional projects, leveraging their advanced skill set to streamline these processes. This position will be responsible for enhancing the global compliance and cybersecurity controls as it relates to shipboard and shoreside environments. The supervisor will be required to measure and report on KPIs, KRIs, audit findings, accomplishments and publish to senior management and key stakeholders. They are responsible for reporting on current regulatory compliance and internal security policy compliance to senior leadership. This position will also be responsible for continuing to modernize existing security and compliance practices, specifically automating testing processes and shifting from a periodic testing approach to a continuous compliance model.

Essential Functions:

• Oversee and assist with the development and execution of GCS’s annual and on-going assessments which include the PCI-DSS continuous compliance program, SOX ITGC testing, and GDPR compliance assessment plans, among others, to ensure the integrity, effectiveness, and efficiency of the compliance framework. Raise awareness to the Business and IT stakeholders of compliance requirements, regulations, and controls
• Support the strategy to mature current Compliance practices to achieve departmental goal of shifting from “regulatory compliance” driven team to a Risk-based program and proactively work to identify potential gaps.  Implement all necessary actions with relevant IT stakeholders and internal and external audit partners to achieve objectives of an effective compliance program and communicate to all key stakeholders and leadership
• Collaborate closely with GRC leadership team to develop brand IT Compliance Framework to include (but not be limited to) SOX, PCI-DSS, Data Privacy (GDPR/CCPA, etc.), IMO etc. to achieve a strong compliance maturity model. Advising on matters related to formal Compliance Governance processes which align and prioritize Data Privacy and Security Compliance initiatives. Assist in developing, preparing, and establishing executive dashboard reporting on compliance events, findings, accomplishments, and publishing these to senior management and key stakeholders
• Oversee the GCS IT Compliance program which includes conducting the annual validations and assessments including but not limited to SOX, PCI-DSS, Data Privacy Regulations (GDPR, CCPA, etc.), and external legal agreements; and determine scope, process, testing, documentation, reporting and remediation. Coordinate with IT Stakeholders, internal and external auditors, and Operating Unit Security Officers to ensure on-going IT compliance with published internal corporate policies and government regulations
• Identify opportunities for automation in current compliance activities and leverage technologies to modernize and streamline team workflows
• Foster a strong team spirit for remote and in-person team resources. Supervise staff by effectively developing, mentoring, and assessing their performance.  Pr