Marine & Technical Machinery Systems Spec

Job Summary:

Every day at Disney Cruise Line we take pride in bringing the magic of Disney to life. We find joy in creating cherished memories and form genuine connections with our guests. We hold each other to the highest degree and always act responsibly while ensuring the safety of fellow cast, crew and guests. United by our Disney values, we work toward excellence in all we do. As a part of our team, you can work in a diverse and inclusive environment amidst a professional and supportive community. If you are ready to create unforgettable experiences and grow as a person and as a professional, apply today.

Under the oversight of the Senior Manager of Electrical Technical Operations, responsible for cyber security for Marine and Technical Machinery Control Systems and Operating Technology aspects of company’s fleet and Island.

Responsibilities:

• Main point of contact for Marine and Technical Systems cyber security.
• Maintains Cyber Security support for Marine and Technical Machinery Control Systems and Operating Technology, including Navigation Equipment, Integrated Bridge System, Integrated Machinery Alarm Control System, Propulsion Systems, Architectural lighting systems, Security Systems (Access Controlled Doors/MOB Systems/Key Control), Satellite Communication systems, and other Marine & Technical Key Equipment.
• Ensures Cyber Security standards are met and in line with regulatory bodies and company polices where applicable (e.g. LR & DNV Ship Classification Rules, IACS Unified Requirements and Recommendations, IMO Guidelines, IEC TC 80 & 18 Standards).
• Implement framework for MTO Systems to identify, protect, detect, respond and recover from cyber incident.
• Apply marine control system Engineering standards to risk-based approach (e.g. Risk Assessment, HAZID, HAZOP, FME(C), etc.). Based on marine & technical machinery control functions to determine acceptability of proposed installation and security safeguards, including redundancy, back up modes of operation, system criticality, mode/consequence of failure.
• Ensures company Cyber Security standards company polices where applicable.
• Manage vendors, onboard teams to see that our standards, policies and procedures are maintained during installation of remote connections and interfaces to other machinery controls networks.
• Provide support to any new or existing systems for remote connections
• Provide technical support to Entertainment, DCL Telecom, DCL IT, Safety, Security and Environmental Policy and Compliance.
• Oversee and monitor Ships Cyber Asset registers for the fleet, including Risk Register.
• Assesses system recovery plans with MTO system manager, including backups, remote OEM Engineering support, etc.
• Oversee software change management procedures related to Marine and Technical machinery control systems
• Coordinates MTO record system updates with TWDC IT Information Security
• Conducts regular status meetings with MTO Managers responsible for MTO Systems and relevant specialists, e.g. Original Equipment Manufacturer, Classification Society, etc.
• Coordinates and oversees Audits or other assessments of Marine and Technical machinery control systems by Classification Society, USCG and other National/Port Administrations, DSE Compliance Safety, TWDC Global Compliance or TWDC IT Information Security
• Advance approver of connection or testing (e.g. penetration testing) to Marine & Technical Machinery Control Systems, that could potentially impact system operation. This includes relevant coordination with Ship Team, Responsible MTO Manager(s), OEM, Classification Society and National Administration, agreement on timescale and any associated system function testing and verification.
• Proposes MTO system security training for MTO Ship and Shore Personnel
• Assists and keeps Senior Manager of Electrical Technical Operations informed of ongoing and planned matters.
• As directed by Senior Manager of Electrical Technical Operations assist with projects and any other duties
• SMS responsibility for upholding the general safety management system responsibilities specified in SMS within areas under their control.
• Maintain MTO SMS Content in line with IMO Resolutions related to Maritime Cyber Risk.
• Assist with departmental budgets for area of responsibilities.

Basic Qualifications:

• 2-5 years of experience in cybersecurity, particularly in relation to industrial control systems or operational technology (OT) and critical infrastructure systems.
• Familiarity with marine and technical machinery control systems, including navigation, propulsion, and communications systems.
• Knowledge of risk-based approaches such as Risk Assessment, HAZID, HAZOP and FMEA (Failure Mode Effects Analysis), particularly applied to marine and technical systems.
• Proven ability to implement frameworks for identifying, protecting, detecting, responding to, and recovering from cybersecurity incidents.
• Ability to implement and manage cybersecurity frameworks for marine and technical operating technology (OT).
• Experience with monitoring systems, conducting audits, and overseeing vulnerability assessments of critical systems to ensure ongoing compliance with cybersecurity standards.
• Ability to manage software change procedures, including overseeing updates, configuration changes, and testing for marine and technical control systems.
• Managing vendors and coordinating with external teams to ensure compliance with security policies during the installation of remote connections and interfaces to machinery systems.
• Strong verbal and written communication skills to provide clear documentation of security protocols, system status updates, risk registers, and incident reports.
• Previous experience working with or securing remote connections to technical systems, particularly in environments with critical operations such as ships or offshore platforms.

Preferred qualifications

• Knowledge of Marine Cybersecurity regulations and standards such as IMO Guidelines, DNV & LR Classification Rules, IEC TC 80 and IACS Unified Requirements.
• Background in marine engineering, or a similar field with knowledge of maritime systems.
• Certifications on industrial control systems (ICS) or operational technology.
• Understanding of maritime safety management systems (SMS), International Maritime Organization (IMO) resolutions, and relevant national and international cybersecurity standards for maritime operations.
• Project management with cybersecurity projects, from planning to implementation, especially in the context of fleet-wide cybersecurity or complex technical infrastructure in marine environments.

Education

• Bachelor’s degree in an Cybersecurity or Information Security, or other relevant degree or relevant work experience.