Senior Manager, Maritime & Destinations Cybersecurity - Royal Caribbean Group

Journey with us! Combine your career goals and sense of adventure by joining our incredible team of employees at Royal Caribbean Group. We are proud to offer a competitive compensation and benefits package, and excellent career development opportunities, each offering unique ways to explore the world.

We are proud to be the vacation-industry leader with global brands — including Royal Caribbean International, Celebrity Cruises and Silversea Cruises — the most innovative fleet and private destinations, and the best people. Together, we are dedicated to turning the vacation of a lifetime into a lifetime of vacations for our guests.

Royal Caribbean Group’s Global Information Security Team has an exciting career opportunity for a full time Senior Manager, Maritime & Destinations Cybersecurity reporting to the AVP, Cybersecurity Strategy and Business Enablement

KEY RESPONSIBILITIES:

The Senior Manager of Maritime & Destinations Cybersecurity leads a dynamic team dedicated to identifying and mitigating risks, threats, and vulnerabilities both on ships and onshore during various stages of construction and delivery. This role involves fostering collaboration with GMO, business and operations teams, Legal, Vendors, and Shipyards to ensure that cybersecurity interests are integrated into their responsibilities. The role is also responsible to contribute to the overall training and education of personnel around cyber threats impacting that part of the business, execution of strategic vision for cyber security, defining efficient and effective processes.

Reporting to the AVP, Cybersecurity Strategy and Business Enablement within the Global Information Security team, the Senior Manager will leverage their expertise in IT, OT, ET to enhance the organization’s security posture while ensuring agility and innovation.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

Senior Manager of Maritime & Destinations Cybersecurity will be responsible for developing, implementing, and overseeing a comprehensive cybersecurity strategy tailored to the unique challenges of the cruise industry, travel, and hospitality. This role requires a deep understanding of maritime operations, cybersecurity threats, and regulatory requirements. The successful candidate will lead a team of cybersecurity professionals and work closely with other departments to ensure the integrity, confidentiality, and availability of our maritime systems and data. Main responsibilities include:

• Plan, execute and coordinate the cybersecurity new build/drive dock Cyber testing of OT, ET and IT technologies.
• Coordinate with maritime cybersecurity officers & superintendents providing all relevant information obtained during initial and subsequent testing; guidance on regulatory compliance challenges observed during testing
• Work directly with other Maritime Teams to drive strategy
• Stay informed about the latest cybersecurity threats, trends, and technologies relevant to the maritime, travel and hospitality industry
• Advise executive leadership such as ship masters, chief electrical engineers, casino and hotel directors on cybersecurity risks and mitigation strategies.
• Serve as highly technical security experts to bring security transformation to both new and legacy infrastructure.
• Utilize data to driven innovation to thwart attacks against our Maritime, Port and Shoreside Vacation destinations.
• Deploy modern technologies quickly, and successfully transition new platforms to the Security Operations Team for ongoing support.
• Lead & Innovate the Maritime Cybersecurity teams to ensure that our fleet meets cybersecurity regulatory requirements.
• People leadership - Attract, motivate, and retain exceptionally talented security operations staff.
• Technical mentorship - Develop technical talent and professional skills within the team.
• Produce and track against key performance indicators that demonstrate the health and effective maintenance of our security systems.
• Engage with project stakeholders to embed security strategy into high-profile initiatives and mergers and acquisitions, ensuring alignment with organizational objectives.
• Be a supporting driver in the establishment and evolving strategy for protecting newbuild shipboard IT and OT systems and processes in order to appropriately reduce existing and emerging risks to RCL maritime assets.
• Develop technical standards and procedures for shipboard and newbuild I.T. and marine operations units regarding how to securely configure and implement I.T. and OT technology.
• Establish and manage relationships with Senior Management within I.T, Marine Operations, Newbuild, Global Security and relevant business units and third party marine and IT shipboard and yard suppliers to review their cyber assurance program and ensure that there is an effective understanding of responsibilities within their areas.

QUALIFICATIONS AND EDUCATION:

• 8+ years of information technology experience, including 6+ years of specialization in OT, ET and IT Information Security roles that include multiple areas of specialization.
• Experience in Security Engineering, Compliance, Architecture, DevSecOps and/or Security Consultation experience preferred
• Bachelor’s degree in information security or equivalent.
• Expert knowledge of securing Active Directory, Azure AD, Networking, ET and OT environments

FINANCIAL/QUANTITIVE RESPONSIBILITIES:

• Budget Management: Develop, manage, and report on aspects of the InfoSec team budget, ensuring alignment with organizational goals while identifying opportunities for cost efficiencies.
• Tool Rationalization: Analyze and evaluate the financial impact of existing security tools, recommending rationalization strategies to enhance capabilities and reduce redundancies, targeting a 15% reduction in total tool expenditure over the next fiscal year.
• Performance Metrics: Establish and monitor key performance indicators (KPIs) to assess the effectiveness of security initiatives, reporting on metrics such as return on investment (ROI) and overall program efficiency.
• Revenue Impact Analysis: Collaborate with finance and operations teams to evaluate how security strategies influence overall business revenue and risk management, providing insights for executive decision-making.

We know there's a lot to consider. As you go through the application process, our recruiters will be glad to provide guidance, and more relevant details to answer any additional questions. Thank you again for your interest in Royal Caribbean Group. We'll hope to see you onboard soon!