It Compliance Analyst (Remote)

Job ID 6493 Location Miami, Florida Date posted 07/17/2023

We are seeking an IT Compliance Analyst to be an individual contributor role with accountability for ensuring the compliance posture as CCL follows the guidelines established for Carnival Corporation, the respective governing bodies and applicable federal and international laws and regulations. The resource supports the maintenance of n integrated programs with secure infrastructure to protect the integrity, confidentiality, and availability of Carnival Cruise Lines (CCL) information systems assets.
The resource will interface with user community to ensure both understanding and compliance with regulatory requirements. The team member will recommend and monitors computing practices to ensure that individual and departmental access and rights, resources, and information are compliant
The resource will be an active participant in annual assessments (SOX, PCI) and will also coordinate remediation of compliance gaps (SOX, PCI, EUGDPR, PII, etc.) and support the greater ecosystem in the event of security incidents including recovery, intrusions, and/or system abuses. The team member is required to maintain current knowledge of security and compliance trends and issues. The resource will support projects across the CCL organization.
Essential Functions

• Update compliance guidelines and standards for CCL applications, databases, infrastructure, networking systems and computing platforms
• Perform periodic compliance assessments of information applications and technology, analyze results, and develop action plans to mitigate risks
• Coordinate and execute remediation efforts arising from compliance deficiencies (Policies, SOX, PII, EUGDPR, CCPA, PCI, HIPPA, Pen tests, etc.)
• Review security and controls to address areas such as applications, databases, infrastructure, security administration, user identification and authentication, access to data, monitoring and reporting
• Manage the exception process for risks that cannot be remediated in stipulated timelines
• Less than 25% shored based travel
• Review and update CCL information security policies and procedures
• Implement and enforce control framework related to CCL’s regulatory and compliance standards (PCI, SOX, EUGDPR, CCPA, PII, HIPPA, etc.)
• Effectively plan and manage information protection initiatives and projects to ensure that objectives, schedules and budgets are met
• Perform other information system department functions as assigned by the CCL’s Security and Compliance Manager
• Provide consultative services and awareness to business units regarding risks, standards of due care and appropriate information security safeguards
• Evaluate security and control aspects of technologies including internally developed applications and defines security requirements to ensure compliance guidelines are met and maintained

Qualifications

• Active certifications in one of the related areas of security and compliance such as CISA, CISM, CISSP, CRISC, GIAC, ISC, CEH, IAM, GSLC
• 3+ years of experience with minimum of 5 years in IT Security and Compliance preferred
• Bachelor’s degree in Computer Science, Information Security, Information Systems / Technology, Engineering, Business, or Management/ Admin preferred
• Active certifications in one of the related areas of security and compliance such as CISA, CISM, CISSP, CRISC, GIAC, ISC, CEH, IAM, GSLC
• Excellent written and verbal communication skills
• Experience reviewing and updating IT policies, standards and guidelines from the lens of a compliance professional
• Hands-on experience with a variety of reporting operations and procedures
• Research, recommend and implement security tools and measures
• Attends meetings and compliance related conferences
• Proven ability as a member of an IT Compliance or Information Security team with a focus on compliance with the ability to communicate compliance related concepts to a broad range of technical and non-technical staff Proven ability as a project leader
• Participates in employee focus groups and committees related to information security and compliance
• Keeps abreast of current and emerging technical information security developments
• Demonstrated experience with at least two security control frameworks (e.g. SOX, SOC 2, ISO, NIST, COSO, COBIT, etc.)
• Strong analytical and organizational skills with strong critical thinking and problem-solving abilities
• Familiarity with common compliance standards (SOX, SOC2, PCI-DSS, GDPR, COSO, COBIT, NIST, and/or ISO 27001
• Highly organized and effective time management skills including the ability to balance competing projects concurrently; asking questions and getting information in order to diagnose security related problem
• Ability to plan, coordinate, and execute complex IT security and compliance assignments; design and applies tools, techniques, and procedures to maintain highest standards of IT Security and Compliance
• Hands-on expertise with supporting PCI Assessments and SOX audits Compliance controls reviews for applications and databases related to SOX, PCI, PII, EUGDPR, HIPPA, etc.
• 3+ years of related and progressively more responsible and expansive work experience in IT Security and Compliance disciplines required
• Experience working directly with internal or external auditors for at least one of the listed standards
• Interpersonal skills at a level to function well in a wide range of administrative and management environments and a strong image of professional discipline
• High level of integrity and trust. Respects and maintains confidentiality of enterprise information including specified security plans and controls

The range for this role’s base salary is $71,096 - $105,000. Offers to selected candidates will be made on a fair and equitable basis, taking into account specific job-related skills and experience.
At Carnival, your total rewards package is much more than your base salary. All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan. Director and above roles are also eligible for an additional vesting equity plan. Plus, Carnival provides comprehensive and innovative benefits to meet your needs, including:

• 401(k) plan that includes a company match
• Financial Benefits:
• Vacation Time – All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.
• Health Benefits:
• Employee Assistance Program and other mental health resources
• Additional programs include company paid term life insurance and disability coverage
• Sick Time – All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.
• Cost-effective medical, dental and vision plans
• Personal and professional learning and development resources including tuition reimbursement
• Paid Time Off
• Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends
• Employee Stock Purchase plan
• On-site preschool program, wellness center, and health clinic at our Miami campus
• Holidays – All full-time and part-time with benefits employees receive days off for 7 company-wide holidays, plus an additional floating holiday to be taken at the employee’s discretion.
• Other Benefits

About Us
In addition to other duties/functions, this position requires full commitment and support for promoting ethical and compliant culture. More specifically, this position requires integrity, honesty, and respectful treatment of others, as well as a willingness to speak up when they see misconduct or have concerns.
Carnival Cruise Line is the most popular cruise brand in North America and operates a fleet of ships designed to foster exceptionally safe, fun and memorable vacation experiences at an outstanding value. Our employees have a responsibility to be accountable for all actions. We consider the environment in all aspects of our business and have a responsibility to put safety and sustainability first. We live and share a positive attitude which is based on fostering an environment of inclusion, trust, a willingness to listen, openness and integrity. Doing this helps us to achieve our ultimate goal, which is to include FUN in everything we do! Speaking of fun, we are officially certified as a Great Place to Work aboard our ships as well as in our global corporate headquarters!
Carnival Corporation & plc and Carnival Cruise Line is an equal employment opportunity/affirmative action employer. In this regard, it does not discriminate against any qualified individual on the basis of sex, race, color, national origin, religion, sexual orientation, age, marital status, mental, physical orsensory disability, or any other classification protected by applicable local, state, federal, and/or international law.