The Ritz-Carlton Yacht Collection runs a fleet of three custom-built superyachts - Evrima, Ilma, and Luminara - operating luxury voyages across the Mediterranean, Caribbean, Baltic, Northern Europe, and Asia-Pacific. The attack surface is unconventional: a floating hospitality operation where IT/OT convergence is physical. Shipboard networks manage everything from guest-facing suites with private terraces to navigation systems, high-end dining logistics, and personalized service platforms, all while moving through jurisdictions and relying on satellite connectivity.
Ilma became the first cruise ship to earn a Five-Star Forbes Travel Guide rating in 2026, which underscores the brand's precision - and the stakes if a breach disrupts operations mid-voyage. Most journeys run seven to ten nights, meaning downtime isn't theoretical; it's a room full of ultra-high-net-worth clients in the middle of an ocean. The yachts are also available for private charters, adding another layer of access-control complexity when the entire vessel becomes a temporary corporate environment.
A cybersecurity role here means defending a maritime IT stack with hospitality-grade expectations. Think segmented networks isolating guest Wi-Fi from engine control systems, endpoint management across cabins and crew quarters, and incident response plans that account for being hundreds of nautical miles from the nearest SOC. The threat model includes ransomware targeting operational continuity, data exfiltration of guest PII (this is Ritz-Carlton clientele), and supply-chain risks from third-party maritime tech vendors. If you've worked in environments where physical infrastructure and digital systems are tightly coupled - and where failure has immediate, tangible consequences - this is that, on water.
