Sr. Architect, Cyber Security

The GCS Senior Cybersecurity Architect is responsible for supporting the development and implementation of enterprise cybersecurity architecture strategies, security design standards, and technical solutions that protect Carnival Corporation’s information assets, systems, and operations. This role contributes to the design and integration of security capabilities across multiple domains, including network security, cloud security, application security, data protection, endpoint security, infrastructure security, identity services, and OT (Operational Technology).

Operating within a global cruise environment spanning shipboard and shoreside systems, this position helps ensure the delivery of secure, scalable, and resilient security solutions across distributed and intermittently connected environments.

• Collaborate with brand IT teams and business stakeholders to ensure new systems and applications meet security best practices, published minimum security requirements, and corporate standards. This includes reviewing network designs, application data flows, and system integrations, and providing appropriate security sign‑off.
• Create high‑level network designs for GCS security tools and cybersecurity reference architecture documentation.
• Build, mature and support architectural review processes.
• Review system design of existing applications/systems utilizing a common framework to identify potential vulnerabilities and gaps, mitigating cyber risks before they can be exploited.
• Develop and maintain hardening standards for networking and computing environments using industry best practices.
• Provide architectural guidance on delivery of secure, scalable, and resilient security solutions across distributed and intermittently connected environments by collaborating with business and technology teams to incorporate security requirements into projects and operational initiatives while aligning with organizational risk‑management objectives and cybersecurity strategies.
• Contribute to the identification, assessment, and mitigation of cybersecurity risks and vulnerabilities to enhance the organization’s overall security posture.
• Develop and maintain cybersecurity reference architectures across shipboard and shore environments, ensuring alignment with industry frameworks such as CIS, NIST, and Zero Trust Architecture principles.

• Scope: Demonstrated expertise in Cybersecurity architecture, with a strong focus on the design and implementation of systems capable of defending against evolving cyber threats. Ability to translate complex cybersecurity concepts into clear, business‑aligned language for non‑technical stakeholders, enabling informed decision‑making. Solid understanding of emerging cybersecurity risks associated with artificial intelligence and Operational Technology (OT) cybersecurity risks, incorporating identity‑centric security controls into environments that bridge IT and OT systems.
• Problem Solving: Design, evaluate, and manage Cybersecurity architecture reviews to align with business objectives and enterprise security standards. Translate complex technical requirements into clear, actionable insights for stakeholders, resolving conflicts and driving consensus on solutions that adhere to cybersecurity best practices and corporate policies.
• Impact: Drive the development of secure, resilient, and compliant system architectures that safeguard critical data, strengthen identity governance, and align with enterprise security standards and regulatory requirements.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience).
• Relevant industry certifications preferred, such as CISSP (Certified Information Systems Security Professional) and CISM or CRISC.

• 8–10+ years of experience in cybersecurity, with at least 5+ years focused on Cybersecurity Architecture in an enterprise setting.
• Proven experience designing and implementing Cybersecurity solutions in complex, global environments.
• Strong experience with Cybersecurity Architecture Review of…