Senior Manager, CyberSecurity Risk Management

Journey with us! Combine your career goals and sense of adventure by joining our exciting team of employees. Royal Caribbean Group is pleased to offer a competitive compensation and benefits package, and excellent career development opportunities, each offering unique ways to explore the world.

The Royal Caribbean Group’s Global Information Security Team has an exciting career opportunity for a full time Senior Manager, CyberSecurity Risk Management reporting to the Director, Security Engagement.

This position will work on-site in Miramar, Florida.

 

Position Summary:

 

The successful candidate will be responsible for overseeing our cybersecurity risk management program ensuring that our company's information assets and technologies are adequately protected.  This is a leadership role and will provide direct management of three teams comprised of Information Risk Management, Third-party Risk Management, and GRC Development. 

 

Essential Duties and Responsibilities:

 

• Provide day-to-day management over risk team members; support hiring, training and collaboration to work with BISOs, business and IT leaders.
• In coordination with Director Security Engagement, develop comprehensive development plans for risk team members to ensure continued maturation of the risk management program and enabling growth in skills and capabilities of risk team members.
• Using thought leadership, develop, implement, and monitor a strategic, comprehensive enterprise cybersecurity and IT risk management program, enhancing RCG’s information security management framework.
• Drive partnership with Director Security Engagement, BISOs, broader GIS leadership, business and IT stakeholders across the company to communicate and make visible risk management concerns.
• Provide enterprise cybersecurity risk insight to Director Security Engagement, BISOs and Business Enablement Engineering teams to support the overall business technology planning, providing a current knowledge around risk and future vision of technology solutions.
• Partner with BISOs, Compliance, Legal, IT resources to achieve effective working relationship that can further the effectiveness of the Information Security Program.
• Drive continued maturity around the implementation of GRC and third-party security toolset for GIS organization; ensuring collaboration with GRC stakeholders.
• Manage and assist in developing and onboarding IS risk assessment tools, templates, and associated processes to provide transparent reporting on activities and portfolio management.
• Establish goals for the team of risk analysts and leads who manage information security system and third-party risk program working alongside BISOs, business and IT leadership to control information technology risk for the organization.
• Collaborate with BISOs, business and IT leaders, and third parties (where applicable) to initiate, conduct, and complete risk assessments in a timely manner.
• Set direction on legal redlines related to third-party cybersecurity risk.
• Provide quality analysis for application and system controls, documentation, and settings to identify security risks that could lead to non-compliance with RCG policies and standards.
• Implement governance model for providing guidance to technical product teams through security requirements and processes, including but are not limited to: Threat and Vulnerability Management scanning and remediation, Identity and Access Management (IAM) system on-boarding and entitlement reviews, Single Sign-on (SSO) and federation, log monitoring via centralized security information and event management (SIEM) solution, privileged access management (PAM)
• Ensure potential information security risks associated with systems and applications are examined, documented and communicated, including potential compliance risks with Sarbanes-Oxley (SOX), Payment Card Industry Data Security Standard (PCI-DSS), Global Data Protection Regulation (GD