Program Manager

Program ManagerThe Cybersecurity Supply Chain Risk Program Manager is responsible for driving the execution and continuous improvement of the enterprise Cybersecurity Supply Chain Risk Management Program. This role serves as the operational driver for supply chain cybersecurity risk governance, coordinating risk management activities across multiple business units. This position requires program management, stakeholder engagement, and communication skills to coordinate cross-functional initiatives while enabling risk-based decision-making.Location: Miami, Florida (Hybrid)To be considered, you must have be Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), or a similar certification.Key ResponsibilitiesDrive the day-to-day execution of the global Cybersecurity Supply Chain Risk Management Program and operational functions.Ensure the development and maintenance of the cybersecurity supply chain risk management framework, operating model, processes, and governance documentation.Coordinate enterprise cybersecurity supply chain risk assessment activities across brands, third-party providers, and business initiatives.Facilitate and coordinate the maintenance of the Enterprise Cybersecurity Risk Register to ensure risks are documented, assessed, and treated.Serve as the central coordinator for cybersecurity supply chain risk activities across multiple global brands.Manage program milestones, execution, and tracking for Third Party Risk Management (TPRM).Address organizational needs and adjust practices or redirect resources as required.Run reports and prepare data points for executive-level stakeholders.Required QualificationsEducation: Bachelor's degree in Cybersecurity, Information Security, Information Technology, Risk Management, Computer Science, Business Administration, or a related field.Experience:5+ years of experience in cybersecurity, information security, enterprise risk management, governance, compliance, audit, or related disciplines.3+ years of experience leading enterprise programs or cross-functional initiatives within a complex global organization.Experience with Third Party Risk Management (TPRM) and Cyber Risk Management.Demonstrated ability to manage multiple priorities across geographically dispersed teams.MUST HAVE:Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), or a similar certification.Skills & Certifications:Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), or a similar certification.Strong understanding of cybersecurity principles, technology risk, governance processes, and control frameworks.Communication, facilitation, and stakeholder management skills.Preferred QualificationsExperience within the cruise line industry is a nice-to-have.Experience with GRC platforms such as Logic8 Risk Cloud.