Holland America Group
GISCS Security Architecture and Engineering Sr. Director
Holland America Group, Miami, Florida, us, 33222
Job Description
The Sr. Director, Security Architecture and Engineering is responsible for leading the overall global strategy for cyber security, implementation of GISCS security tools and defining a global cyber security reference framework. The role requires a strategic thinker with a strong cyber security technical background who will be designing and implementing cyber security tools and processes in shaping the organization's security posture across the global brands. This leadership position will oversee a growing team of security architects and/or engineers that cover specific specialties such as cloud, identity and access management, PCI as well as general security best practices. The leader will contribute significantly to safeguard our assets, maintain customer trust, and uphold the reputation of Carnival Corporation in a dynamic and ever-evolving digital landscape.
Essential Functions: Team Management: Manage and mentor a team of managers, security engineers, architects, and specialists to deliver security solutions and services. Develop a comprehensive training plan for the domain's team to ensure a high level of expertise, in fulfilling their responsibilities Vendor management: Responsible for financially leading and managing negotiations with external vendors and suppliers, as well as developing strong relationships. This includes selecting vendors, defining proof of concept plans, success criteria and ensuring vendor deliverables. Cyber Security Pillar Relations: Interact and collaborate with cyber security pillars to help progress programs and ensure that the proper technical skill set is guiding the initiatives Brand IT Relations: Work with brand IT leaders to ensure initiatives follow best practices and adhere to corporate polices and standards. Establish trust between IT and GISCS and understand the business and their needs Policies and Standards: Define or review corporate cyber security policies and standards using industry best practices with an understanding of the company's strategic goals Security Tool Implementation and Support: Ensure security tools are architected and deployed across the global brands. Ensure deliverable timelines are met or escalated as needed. Ensure transition to operations after successful deployment of tools and provide technical support as needed Strategy: Define and tweak cyber security goals and strategy. Qualifications:
Education: Bachelor's degree in Information Systems or Computer Science related. Master's degree a plus Required Certifications: Advanced security certifications preferred (CISSP, CISM, CISA) Required Years & Area of Professional Experience: Minimum 10 years in Cyber security. Minimum 10 years in Architecture and Engineering. Critical Professional Related Technical/Computer Skills:
Experience growing an IT Security department, with very hands-on with the technology. Strong security tool experience including SIEM solutions as well others. Excellent understanding of cyber security and risk management principles Demonstrated experience in communicating effectively in written and spoken form to broad internal and external entities including non-technical management, business colleagues, product/service vendors, and external peers. Ability to influence and persuade others through collaboration. Strategic thinker who can translate vision into tactical execution. Decision-making and project management skills Ability to prioritize effectively in a highly dynamic work environment Experience in cloud security
Knowledge, Skills & Abilities:
Excellent oral and written communication skills Excellent network and architecture design skills Strong organizational and analytical skills Ability to multi-task and handle changing priorities Interpersonal skills at a level to function well in a wide range of administrative and management environments and a strong image of professional discipline Decision-Making:
Strategic: Decisions affect the long-term direction and policy of the entire company. These decisions affect the short-term and long-term performance of Carnival Corporation. Strategic decisions are high-risk because their outcomes are largely unknown and have a huge impact. These types of decisions are usually made at the top level of a company
Tactical: Decisions focus on intermediate-term issues. The purpose of decisions made at this level are to help move Carnival Corporation closer to reaching strategic goals. Outcomes are predictable. After a decision is made by Top Executive Leadership, the next phase is to take the needed steps to implement it
Operational: Decisions focus on day-to-day activities within the company. Decisions made at this level help to ensure that daily activities proceed smoothly and therefore help to move the company toward reaching a strategic goal. They have short term consequences. Examples are: Handling employee conflicts, purchasing materials needed for operations
Physical Demands: Must be able to remain in a stationary position at a desk and/or computer for extended periods of time
Travel: Less than 25% with shipboard travel likely. Less than 25% non-shipboard travel likely.
Work Conditions: Work primarily in a climate controlled environment with minimal safety/health hazard potential. May be requested to work different shifts to cover global brand time zone differences. Other job specific working conditions.
This position is classified as "in-office." As an in-office role, it requires employees to work from a designated Carnival office in South Florida from Tuesday through Thursday. Employees may work from home on Mondays and Fridays. Some positions may require additional in-office time each week and final schedule is determined by your leader. Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area.
Offers to select candidates will be made on a fair and equitable basis, taking into account specific job-related skills and experience.
At Carnival, your total rewards package is much more than your base salary. All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan. Director and above roles may also be eligible to participate in Carnival's discretionary equity incentive plan. Plus, Carnival provides comprehensive and innovative benefits to meet your needs, including:
Health Benefits:
Cost-effective medical, dental and vision plans Employee Assistance Program and other mental health resources Additional programs include company paid term life insurance and disability coverage
Financial Benefits:
401(k) plan that includes a company match Employee Stock Purchase plan
Paid Time Off
Holidays - All full-time and part-time with benefits employees receive days off for 7 company-wide holidays, plus an additional floating holiday to be taken at the employee's discretion. Vacation Time - All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure. Sick Time - All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.
Other Benefits
Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends Personal and professional learning and development resources including tuition reimbursement. On-site preschool program and wellness center at our Miami campus
#LI-Hybrid
#LI-SH1
About Us
Carnival Corporation & plc is the world's largest leisure travel company, our mission to deliver unforgettable happiness to our gust through our diverse portfolio of leading cruise brands and island destinations, including Carnival Cruise Line, Holland America Line, Princess Cruises, and Seabourn in North America and Australia; P&O Cruises and Cunard Line in the United Kingdom; AIDA in Germany; Costa Cruises in Southern Europe.
Join us and embark on a career that offers not only the chance to grow professionally but also the opportunity to be part of a global community that makes a difference.
In addition to other duties/functions, this position requires full commitment and support for promoting ethical and compliant culture. More specifically, this position requires integrity, honesty, and respectful treatment of others, as well as a willingness to speak up when they see misconduct or have concerns.
Carnival Corporation & plc and Carnival Cruise Line is an equal employment opportunity/affirmative action employer. In this regard, it does not discriminate against any qualified individual on the basis of sex, race, color, national origin, religion, sexual orientation, age, marital status, mental, physical or sensory disability, or any other classification protected by applicable local, state, federal, and/or international law.
https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/fmlaen.pdf
https://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf
https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/eppac.pdf
https://www.dol.gov/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf
The Sr. Director, Security Architecture and Engineering is responsible for leading the overall global strategy for cyber security, implementation of GISCS security tools and defining a global cyber security reference framework. The role requires a strategic thinker with a strong cyber security technical background who will be designing and implementing cyber security tools and processes in shaping the organization's security posture across the global brands. This leadership position will oversee a growing team of security architects and/or engineers that cover specific specialties such as cloud, identity and access management, PCI as well as general security best practices. The leader will contribute significantly to safeguard our assets, maintain customer trust, and uphold the reputation of Carnival Corporation in a dynamic and ever-evolving digital landscape.
Essential Functions: Team Management: Manage and mentor a team of managers, security engineers, architects, and specialists to deliver security solutions and services. Develop a comprehensive training plan for the domain's team to ensure a high level of expertise, in fulfilling their responsibilities Vendor management: Responsible for financially leading and managing negotiations with external vendors and suppliers, as well as developing strong relationships. This includes selecting vendors, defining proof of concept plans, success criteria and ensuring vendor deliverables. Cyber Security Pillar Relations: Interact and collaborate with cyber security pillars to help progress programs and ensure that the proper technical skill set is guiding the initiatives Brand IT Relations: Work with brand IT leaders to ensure initiatives follow best practices and adhere to corporate polices and standards. Establish trust between IT and GISCS and understand the business and their needs Policies and Standards: Define or review corporate cyber security policies and standards using industry best practices with an understanding of the company's strategic goals Security Tool Implementation and Support: Ensure security tools are architected and deployed across the global brands. Ensure deliverable timelines are met or escalated as needed. Ensure transition to operations after successful deployment of tools and provide technical support as needed Strategy: Define and tweak cyber security goals and strategy. Qualifications:
Education: Bachelor's degree in Information Systems or Computer Science related. Master's degree a plus Required Certifications: Advanced security certifications preferred (CISSP, CISM, CISA) Required Years & Area of Professional Experience: Minimum 10 years in Cyber security. Minimum 10 years in Architecture and Engineering. Critical Professional Related Technical/Computer Skills:
Experience growing an IT Security department, with very hands-on with the technology. Strong security tool experience including SIEM solutions as well others. Excellent understanding of cyber security and risk management principles Demonstrated experience in communicating effectively in written and spoken form to broad internal and external entities including non-technical management, business colleagues, product/service vendors, and external peers. Ability to influence and persuade others through collaboration. Strategic thinker who can translate vision into tactical execution. Decision-making and project management skills Ability to prioritize effectively in a highly dynamic work environment Experience in cloud security
Knowledge, Skills & Abilities:
Excellent oral and written communication skills Excellent network and architecture design skills Strong organizational and analytical skills Ability to multi-task and handle changing priorities Interpersonal skills at a level to function well in a wide range of administrative and management environments and a strong image of professional discipline Decision-Making:
Strategic: Decisions affect the long-term direction and policy of the entire company. These decisions affect the short-term and long-term performance of Carnival Corporation. Strategic decisions are high-risk because their outcomes are largely unknown and have a huge impact. These types of decisions are usually made at the top level of a company
Tactical: Decisions focus on intermediate-term issues. The purpose of decisions made at this level are to help move Carnival Corporation closer to reaching strategic goals. Outcomes are predictable. After a decision is made by Top Executive Leadership, the next phase is to take the needed steps to implement it
Operational: Decisions focus on day-to-day activities within the company. Decisions made at this level help to ensure that daily activities proceed smoothly and therefore help to move the company toward reaching a strategic goal. They have short term consequences. Examples are: Handling employee conflicts, purchasing materials needed for operations
Physical Demands: Must be able to remain in a stationary position at a desk and/or computer for extended periods of time
Travel: Less than 25% with shipboard travel likely. Less than 25% non-shipboard travel likely.
Work Conditions: Work primarily in a climate controlled environment with minimal safety/health hazard potential. May be requested to work different shifts to cover global brand time zone differences. Other job specific working conditions.
This position is classified as "in-office." As an in-office role, it requires employees to work from a designated Carnival office in South Florida from Tuesday through Thursday. Employees may work from home on Mondays and Fridays. Some positions may require additional in-office time each week and final schedule is determined by your leader. Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area.
Offers to select candidates will be made on a fair and equitable basis, taking into account specific job-related skills and experience.
At Carnival, your total rewards package is much more than your base salary. All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan. Director and above roles may also be eligible to participate in Carnival's discretionary equity incentive plan. Plus, Carnival provides comprehensive and innovative benefits to meet your needs, including:
Health Benefits:
Cost-effective medical, dental and vision plans Employee Assistance Program and other mental health resources Additional programs include company paid term life insurance and disability coverage
Financial Benefits:
401(k) plan that includes a company match Employee Stock Purchase plan
Paid Time Off
Holidays - All full-time and part-time with benefits employees receive days off for 7 company-wide holidays, plus an additional floating holiday to be taken at the employee's discretion. Vacation Time - All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure. Sick Time - All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.
Other Benefits
Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends Personal and professional learning and development resources including tuition reimbursement. On-site preschool program and wellness center at our Miami campus
#LI-Hybrid
#LI-SH1
About Us
Carnival Corporation & plc is the world's largest leisure travel company, our mission to deliver unforgettable happiness to our gust through our diverse portfolio of leading cruise brands and island destinations, including Carnival Cruise Line, Holland America Line, Princess Cruises, and Seabourn in North America and Australia; P&O Cruises and Cunard Line in the United Kingdom; AIDA in Germany; Costa Cruises in Southern Europe.
Join us and embark on a career that offers not only the chance to grow professionally but also the opportunity to be part of a global community that makes a difference.
In addition to other duties/functions, this position requires full commitment and support for promoting ethical and compliant culture. More specifically, this position requires integrity, honesty, and respectful treatment of others, as well as a willingness to speak up when they see misconduct or have concerns.
Carnival Corporation & plc and Carnival Cruise Line is an equal employment opportunity/affirmative action employer. In this regard, it does not discriminate against any qualified individual on the basis of sex, race, color, national origin, religion, sexual orientation, age, marital status, mental, physical or sensory disability, or any other classification protected by applicable local, state, federal, and/or international law.
https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/fmlaen.pdf
https://www.dol.gov/ofccp/regs/compliance/posters/pdf/eeopost.pdf
https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/eppac.pdf
https://www.dol.gov/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf