Sr. Manager Information Security & Compliance

Join the Ritz‑Carlton Yacht Collection:
Where Every Voyage is a Symphony of Luxury

Embark on an extraordinary journey with the Ritz‑Carlton Yacht Collection, an exquisite extension of the renowned Ritz‑Carlton brand, dedicated to redefining ultra‑luxury hospitality  a "Lady or Gentleman" of our esteemed team, you'll be entrusted with the art of delivering the impeccable "Gold Standards" that have made the Ritz‑Carlton an epitome of excellence across the globe.

The Gold Standards are the bedrock of the Ritz‑Carlton experience, setting us apart in the industry and establishing a legacy of unparalleled service. These standards embody the values and culture that define our brand, and serve as the compass guiding our every endeavor.

At The Ritz‑Carlton, our Ladies & Gentlemen are the most important resource in our service commitment to each other and our guests.

By applying the principles of trust, honesty, respect, integrity, and commitment, we empower and nurture talent to the benefit of each individual and the company.

The Ritz‑Carlton fosters a culture where all are valued, quality of life is enhanced, individual aspirations are fulfilled, and The Ritz‑Carlton Mystique is strengthened.

Join us on a journey where every day is a testament to the highest standard of luxury and service. Apply now and be part of an unparalleled legacy in hospitality.

The Senior Manager, Information Security & Compliance is responsible for establishing, operating, and continuously improving the company’s IT security, risk, and compliance programs across both shoreside and shipboard technology environments.

This role ensures that enterprise IT systems, cloud platforms, applications, and data are secure, compliant, and resilient. The position requires a hands‑on, IT‑centric security leader who can embed security into infrastructure, cloud architecture, Dev Ops pipelines, and enterprise platforms, while operating effectively in a lean team model.

• Define, implement, and enforce IT security policies, standards, and procedures across all enterprise systems (cloud, on‑prem, and shipboard).
• Own and operate the Information Security Management System (ISMS) aligned with ISO 27001 / NIST frameworks.
• Establish governance processes to ensure security is embedded in all IT initiatives and system lifecycle activities.
• Maintain asset inventory and data classification in partnership with application and infrastructure owners.

• Lead IT‑centric risk assessments across:
  Enterprise applications, Cloud platforms (AWS, Azure) and Infrastructure and networks (including shipboard systems)
• Oversee compliance programs including: PCI DSS (primary focus), SOC 2, ISO 27001, NIST, HIPAA (as applicable), and Privacy requirements (GDPR, data protection regulations)
• Maintain a centralized IT risk register and track remediation plans.
• Coordinate IT audits, control testing, and evidence management.

• Establish and govern security architecture standards for IT systems, including Cloud‑native environments (AWS, Azure) and Enterprise platforms (e.g., Salesforce, Snowflake, SaaS ecosystem).
• Partner with IT and Dev Ops teams to embed security into: CI/CD pipelines (Dev Sec Ops ), Application development lifecycle and Infrastructure provisioning and configuration.
• Define and enforce standards for Secure configurations, Logging and monitoring and Encryption and key management.

• Lead IT initiatives for modern identity architecture, including:
  Single Sign-On (SSO), Multi‑Factor Authentication (MFA), Zero Trust principles and Privileged Access Management (PAM)
• Standardize and centralize identity governance across enterprise systems and shipboard environments.

• Oversee IT security operations in partnership with SOC/MSSP providers, including:
  Monitoring and alerting, Vulnerability management programs, Endpoint, network, and cloud security tooling
• Own and lead the IT Incident Response Program:
  Develop and maintain…