Sr. Architect, Cyber Security

GCS Senior Cybersecurity Architect

The GCS Senior Cybersecurity Architect is responsible for supporting the development and implementation of enterprise cybersecurity architecture strategies, security design standards, and technical solutions that protect Carnival Corporation's information assets, systems, and operations. This role contributes to the design and integration of security capabilities across multiple domains, including network security, cloud security, application security, data protection, endpoint security, infrastructure security, identity services, and OT (Operational Technology).

Operating within a global cruise environment spanning shipboard and shoreside systems, this position helps ensure the delivery of secure, scalable, and resilient security solutions across distributed and intermittently connected environments.

The GCS Senior Cybersecurity Architect collaborates with business and technology teams to incorporate security requirements into projects and operational initiatives while aligning with organizational risk management objectives and cybersecurity strategies.

Serving as a trusted security advisor to global brands and technology teams, the role provides architectural guidance and security oversight for technology initiatives. Responsibilities include participating in architecture and design reviews, assessing security risks, reviewing infrastructure and network changes, recommending security controls, and helping establish and maintain cybersecurity standards, patterns, and best practices. The GCS Senior Cybersecurity Architect works closely with engineering, operations, and project teams to ensure security is embedded throughout the technology lifecycle while supporting innovation, operational efficiency, and regulatory compliance.

This position balances strategic planning and hands-on engagement, contributing to the continual enhancement of the organization's cybersecurity posture through the evaluation, design, and adoption of modern security technologies, frameworks, and architectures.

Essential Functions:

• Collaborate with brand IT teams and business stakeholders to ensure new systems and applications meet security best practices, published minimum security requirements, and corporate standards. This includes reviewing network designs, application data flows, and system integrations, and providing appropriate security sign-off.
• Create high level network designs for GCS security tools and cybersecurity reference architecture documentation.
• Build, mature and support architectural review process.
• Review system design of existing applications/systems utilizing a common framework to identify potential vulnerabilities and gaps in the system, helping to mitigate cyber risks and protect sensitive data by proactively addressing potential threats before they can be exploited.
• Develop and maintain hardening standards for networking and computing environments using industry best practices.
• Provide architectural guidance on delivery of secure, scalable, and resilient security solutions across distributed and intermittently connected environments by collaborating with business and technology teams to incorporate security requirements into projects and operational initiatives while aligning with organizational risk management objectives and cybersecurity strategies.
• Contribute to the identification, assessment, and mitigation of cybersecurity risks and vulnerabilities to enhance the organization's overall security posture.
• Develop and maintain cybersecurity reference architectures across shipboard and shore environments, ensuring alignment with industry frameworks such as CIS, NIST, and Zero Trust Architecture principles.

Knowledge, Skills & Abilities:

• Scope:
  Demonstrated expertise in Cybersecurity architecture, with a strong focus on architecture and design of systems capable of defending against evolving cyber threats. Ability to effectively translate complex cybersecurity concepts into clear, business-aligned language for non-technical stakeholders, enabling informed decision-making. Solid understanding of emerging cybersecurity risks associated with artificial intelligence (AI). Knowledge of Operational Technology (OT) cybersecurity risks, with the ability to incorporate identity-centric security controls into environments that bridge IT and OT systems.
• Problem Solving:
  Design, evaluate, and manage Cybersecurity architectures reviews to align with business objectives and enterprise security standards. Translate complex technical requirements into clear, actionable insights for stakeholders, resolving conflicts and driving consensus on solutions that adhere to cybersecurity best practices and corporate policies.
• Impact:
  Drive the development of secure, resilient, and compliant system architectures that safeguard critical data, strengthen identity governance, and align with enterprise security standards and regulatory requirements.

Essential/

Minimum qualifications:

• Bachelor's degree in Cybersecurity,…