Sr. Data Security Director

The Sr. Director, Data Security is a strategic leader responsible for developing and overseeing an organization's data security framework, ensuring the protection of sensitive information, compliance with regulatory standards, and resilience against cyber threats. This role involves leading security teams, designing enterprise-wide security strategies, and collaborating with executive leadership to align security initiatives with business objectives, ensuring the confidentiality, integrity, and availability of sensitive information. This role encompasses developing and enforcing data security policies, implementing advanced security technologies to protect digital assets, and overseeing technology operations.

Essential Functions:

• Lead global strategic initiatives for data loss prevention (DLP) and data classification. Assess and enhance existing data protection controls to develop a comprehensive data security strategy aligned with business objectives and regulatory requirements. Develop 3 year roadmaps for the data security team. Collaborate with global operating unit leads to implement policies and ensure adequate controls. 
• Develop and implement a comprehensive data security strategy that incorporates existing data protection controls and aligns with the business objectives.
• Ensure adherence to relevant regulations, including GDPR, PCI DSS, HIPAA, and others, by implementing and maintaining robust compliance frameworks.
• Build and manage relationships with external security vendors and service providers, ensuring alignment with organizational values. Oversee the release of domain-specific requirements, support negotiations, ensure vendor compliance with agreed-upon terms, and maximize the benefits of each contract.
• Lead and mentor team members to deliver effective security solutions and services. Develop and implement a comprehensive training plan to ensure the team maintains a high level of expertise and fulfils their responsibilities proficiently.
• Lead and oversee data security projects in partnership with the strategic and planning office, providing technical guidance to brands to ensure successful project execution.
• Develop and distribute the Key Performance Indicators (KPIs) to all global business units, ensuring adherence to defined criteria. Additionally, provide guidance to both business units and designated organizational contacts to foster effective communication and ensure compliance with domain-specific requirements and guidelines.
• Continuously evaluate and revise global policies and standards to address any gaps and ensure compliance with evolving regulations.
• Oversee the development and management of the team's budget, ensuring efficient allocation of resources. Monitor expenses to ensure adherence to budgetary and financial goals.
• Performs other duties as assigned.                                                                                            

Qualifications:

• Bachelor’s degree or higher in the field of Engineering, Computer Science, Business Informatics, Information Technology, Information security or equivalent advance technology field of study, or equivalent work experience. Master’s degree relevant to Information Technology and Security preferred. 
• Core concepts of data security, security Architecture, security operations and security awareness programs.
• A minimum of 15 years of total IT experience, at a global scale with a  minimum of 10 years of cyber security with strong focus in a Data Security. 
• 5 years of leadership experience.
• Team management and stakeholder management experience.
• Previously acted as senior member of information security team in large organization. 
• Should have strong experience working with technical teams as needed.
• Lead by example by ‘respecting and protecting’ the health and safety of yourself and others. 
• Ensure your team and colleagues speak up report all accidents, ‘near miss’ incidents and work-related ill health conditions.
• Help your team follow HESS rules and procedures by promoting the HESS Golden Rules
• Attend HESS training & conduct risk assessments where required.
• Demonstrate HESS leadership in accordance with our Heroes of Safe & Well programmed.

Knowledge, Skills & Abilities:

• Advanced knowledge of Data Loss Prevention, Data Sensitivity, Labelling using Microsoft Purview.
• Understand core concepts of data security, security architecture, security operations, and security awareness programs. 
• Strong leadership skills to manage and mentor a team of security professionals.
• Strong familiarity with data loss prevention and data lifecycle.
• Ability to manage technical staff in a cross functional environment. 
• Must be a strong communicator with exceptional verbal and written communication skills to translate the vision and strategy into clear priorities and direction, both internally and externally.
• Skilled at mentoring and motivating staff, communicating goals and other corporate initiatives, and driving to results.
• Ability to conduct risk assessments and develop risk mitigation strategies.
• Strong analytical and problem-solving abilities.
• Ability to work in a fast-paced, global environment.

Physical Demands:  Must be able to remain in a stationary position at a desk and/or computer for extended periods of time. 

Travel: Less than 25% with shipboard travel likely

Work Conditions:  Work primarily in a climate-controlled environment with minimal safety/health hazard potential. 

This position is classified as “in-office.”  As an in-office role, it requires employees to work from a designated Carnival office in South Florida Tuesday through Thursday each week. Employees may work from their homes on Mondays and Fridays.  Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area. 

Offers to selected candidates will be made on a fair and equitable basis, taking into account specific job-related skills and experience.  

At Carnival, your total rewards package is much more than your base salary. All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan. Director and above roles may also be eligible to participate in Carnival’s discretionary equity incentive plan. Plus, Carnival provides comprehensive and innovative benefits to meet your needs, including:

• Health Benefits:
  • Cost-effective medical, dental and vision plans
  • Employee Assistance Program and other mental health resources
  • Additional programs include company paid term life insurance and disability coverage 
• Financial Benefits:
  • 401(k) plan that includes a company match
  • Employee Stock Purchase plan
• Paid Time Off
  • Holidays – All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee’s discretion. 
  • Vacation Time – All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year.  Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year.  All employees gain additional vacation time with further tenure.
  • Sick Time – All full-time employees receive 80 hours of sick time each year.  Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.  
• Other Benefits
  • Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
  • Personal and professional learning and development resources including tuition reimbursement 
  • On-site preschool program and wellness center at our Miami campus

#LI-Hybrid

#LI-LS1