> Markdown version of [/jobs/ext/3055683-director-cyber-security-counter-threat-management](https://www.wearedevelopers.com/jobs/ext/3055683-director-cyber-security-counter-threat-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Director, Cyber Security Counter Threat Management

- **Company:** Royal Caribbean International
- **Location:** Miramar, FL, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Applications Architecture, Cloud Computing Security, Cyber Security, File Systems, Cloud Services, Software Vulnerability Management, Information Technology
- **Published:** September 24, 2026
- **Apply:** https://www.jobmonkeyjobs.com/career/28047635/Director-Cyber-Security-Counter-Threat-Management-Florida-Miramar-Miramar-1889

## About the Role

* Bachelor's degree in Computer Science, Cyber Security, Information Technology, Engineering, or a similar technical discipline; advanced degree preferred.
 * 10+ years of experience in information technology.
 * 6+ years of experience in attack surface management, vulnerability management, infrastructure security, security engineering, or cloud security roles.
 * Demonstrated experience leading Managers and highly technical security SMEs
 * A broad and deep understanding of cyber-security threats, vulnerabilities, exploitability, controls, remediation strategies, and exposure management practices.
 * Strong technical knowledge in information technology, including hardware, networking, architecture, protocols, file systems, operating systems, cloud services, application architecture, APIs, and common enterprise platforms.
 * An ability to communicate complex and technical issues to diverse audiences, including engineers, operators, business stakeholders, executives, auditors, and regulators.
 * Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and the associated impact on the organization.

## Description

The Director of Cyber Security Counter Threat Management leads two core functions: Attack Surface Management and Vulnerability Management.

For Attack Surface Management, this role sets the enterprise strategy for identifying, prioritizing, and reducing cyber attack surface risk across the global environment, with the goal of protecting Royal Caribbean Group assets.

For Vulnerability Management, this role leads the team responsible for reducing vulnerability risk across enterprise, cloud, infrastructure, and shipboard environments. Success requires executive-level communication, cross-functional influence, strong people leadership, and the ability to balance security risk reduction with business operations and enablement., * Lead Managers and highly technical subject matter experts responsible for attack surface discovery & hardening, infrastructure vulnerability governance, and configuration risk management.

 * Set enterprise strategy, direction, roadmap, and operating model for the Attack Surface Management & Vulnerability Management.
 * Serve as an executive escalation point for complex remediation challenges, high-risk vulnerabilities, policy exceptions, and business-impacting security decisions while balancing the needs of security and business operations.
 * Technical mentorship - Develop technical talent and professional skills within the team
 * Partner with BISOs, Digital, IT, product, engineering, cloud, shipboard technology, and business leaders to drive risk reduction while enabling business outcomes.
 * Establish risk-based prioritization models that account for exploitability, asset criticality, business impact, regulatory expectations, and operational constraints.
 * Produce and track key performance indicators and risk indicators to demonstrate improvements in infrastructure vulnerabilities, configuration issues, assessment coverage, remediation aging, and overall exposure reduction.
 * Drive automation of ASM workflows using scripting, orchestration, APIs, AI-enabled workflows, and agentic AI capabilities to improve scale, speed, consistency, and measurable risk reduction.
 * Define governance, guardrails, and control expectations for AI- and automation-enabled ASM processes in partnership with cybersecurity, legal, compliance, privacy, and risk stakeholders.
 * Influence without authority across distributed technology and business teams to improve remediation ownership, accountability, and execution speed.