Sr. Architect, Cyber Security

Overview

The GCS Senior Cybersecurity Architect is responsible for supporting the development and implementation of enterprise cybersecurity architecture strategies, security design standards, and technical solutions that protect Carnival Corporation’s information assets, systems, and operations. This role contributes to the design and integration of security capabilities across multiple domains, including network security, cloud security, application security, data protection, endpoint security, infrastructure security, identity services, and OT (Operational Technology).

Operating within a global cruise environment spanning shipboard and shoreside systems, this position helps ensure the delivery of secure, scalable, and resilient security solutions across distributed and intermittently connected environments.

The GCS Senior Cybersecurity Architect collaborates with business and technology teams to incorporate security requirements into projects and operational initiatives while aligning with organizational risk management objectives and cybersecurity strategies. Serving as a trusted security advisor to global brands and technology teams, the role provides architectural guidance and security oversight for technology initiatives. Responsibilities include participating in architecture and design reviews, assessing security risks, reviewing infrastructure and network changes, recommending security controls, and helping establish and maintain cybersecurity standards, patterns, and best practices.

The role works closely with engineering, operations, and project teams to ensure security is embedded throughout the technology lifecycle while supporting innovation, operational efficiency, and regulatory compliance.

This position balances strategic planning and hands-on engagement, contributing to the continual enhancement of the organization’s cybersecurity posture through the evaluation, design, and adoption of modern security technologies, frameworks, and architectures.

• Collaborate with brand IT teams and business stakeholders to ensure new systems and applications meet security best practices, published minimum security requirements, and corporate standards. This includes reviewing network designs, application data flows, and system integrations, and providing appropriate security sign-off.
• Create high level network designs for GCS security tools and cybersecurity reference architecture documentation.
• Build, mature and support architectural review process.
• Review system design of existing applications/systems utilizing a common framework to identify potential vulnerabilities and gaps in the system, helping to mitigate cyber risks and protect sensitive data by proactively addressing potential threats before they can be exploited.
• Develop and maintain hardening standards for networking and computing environments using industry best practices.
• Provide architectural guidance on delivery of secure, scalable, and resilient security solutions across distributed and intermittently connected environments by collaborating with business and technology teams to incorporate security requirements into projects and operational initiatives while aligning with organizational risk management objectives and cybersecurity strategies.
• Contribute to the identification, assessment, and mitigation of cybersecurity risks and vulnerabilities to enhance the organization’s overall security posture.
• Develop and maintain cybersecurity reference architectures across shipboard and shore environments, ensuring alignment with industry frameworks such as CIS, NIST, and Zero Trust Architecture principles.

• Scope: Demonstrated expertise in cybersecurity architecture with a strong focus on designing systems capable of defending against evolving cyber threats. Ability to translate complex cybersecurity concepts into clear, business-aligned language for non-technical stakeholders. Awareness of emerging cybersecurity risks related to AI. Knowledge of OT cybersecurity risks and the ability to incorporate identity-centric security controls that bridge IT and OT environments.
• Problem Solving: Design,…