cybersecurity analyst senior, governance at Starbucks Coffee Company

Seattle, Washington, United States -

Full Time

Start Date

Immediate

Expiry Date

15 Apr, 26

Salary

0.0

Posted On

15 Jan, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity Governance, Risk Management, Compliance, Analytical Thinking, Interpersonal Skills, Communication Skills, Technical Expertise, Systems Thinking, Policy Documentation, Control Procedures, Security Best Practices, ISO 27001, NIST 800-53, SOC-2, PCI, Customer Focus, Leadership

Industry

Retail

Description

Now Brewing - cybersecurity analyst senior, governance! #tobeapartner From the beginning, Starbucks set out to be a different kind of company. One that not only celebrated coffee and the rich tradition, but that also brought a feeling of connection. We are known for developing extraordinary leaders who share this passion and are guided by their service to others. Starbucks technologists work to achieve this mission with innovative technology delivered to our partners, customers, stores, roasters, and global communities. A successful cybersecurity analyst sr at Starbucks is collaborative, organized, and able to work effectively in a self-directed manner with minimal direction from lead and/or manager. You should have strong critical and analytical thinking skills, exhibit exceptional oral and written interpersonal and communication skills, and have experience in cybersecurity governance, risk and compliance (GRC) or a related cybersecurity domain. This position reports to the manager of cybersecurity governance within the Global Cybersecurity Services (GCS) organization. GCS is chartered with leading, inspiring, and supporting Starbucks to cultivate trust in our brand by ensuring confidentiality, integrity, & availability in every partner, customer & supplier experience. This position will provide governance advisory services and support our ongoing governance tools lifecycle process. You will be responsible for gathering, documenting and assessing policies, standards, controls, procedures and configurations across our governance tools architecture and common controls framework. An effective analyst will develop subject matter expertise across the GRC and GCS portfolio by collaborating with functional experts and stakeholders to understand and document our data and technology landscape. This role requires a unique blend of technical, cybersecurity and analytical expertise, a product ownership mindset, and systems thinking - ideal for someone who thrives at the intersection of business strategy and execution of cybersecurity GRC. This position models and acts in accordance with Starbucks guiding principles. As a cybersecurity analyst sr governance, you will Partner closely with business stakeholders throughout the organization to gather and translate requirements into actionable controls to reduce risk, ensure compliance, and build operational resilience across the enterprise. Support development and implementation of cybersecurity governance tools from policies to control procedures by gathering requirements from senior analysts and leadership, drafting documents and revising based on executive feedback while ensuring all feedback and changes are traceable through the document lifecycle. Assess and recommend changes to governance tools through regular reviews and monitoring to ensure consistency, accessibility and coverage in a rapidly evolving business, technology and regulatory environment. Document and steward records for new and existing security controls which are critical inputs to risk assessments, system security plans and compliance services. Enjoy working on an energetic, fun team with demonstrated ability to work in an increasingly self-directed manner with the ability to balance multiple priorities and meet deadlines to drive the business forward as part of a highly collaborative team. Be accountable for the quality and success of the outcome of your work - You will ensure processes are known, documented, maintained, and properly performed to produce consistent, timely, high-quality deliverables. We'd love to hear from people with: Bachelor's degree Computer Science or related field and 3-5 years of relevant technology experience in cybersecurity governance, risk and compliance or related cybersecurity domain. Proven working knowledge of systems development lifecycle and IT operations. Configuration knowledge of relevant applications/modules/platforms. Proven knowledge of multidisciplinary principles and practices for achieving successful outcomes in various projects and activities. Extensive experience and expertise on security best practices and industry standards, such as ISO 27001, SOC-2, NIST 800-53, NIST CSF, and PCI. Ability to understand the compliance implications of emerging technologies. An aptitude for understanding and navigating technically complex issues, delivering solutions that meet business objectives. Customer Focus: Delivers legendary service that meets and exceeds all customers' expectations. Program Support: Conducting assessments and designing processes to support ST controls and compliance, supporting control remediation efforts, and driving continuous improvement. Analyze legal and regulatory requirements, manage policies and procedures, and provide governance support, while coordinating program activities. Leadership: Coaching, mentoring, and training other analysts to enhance their skills and knowledge within the team. It also includes developing and proposing program innovations to drive continuous improvement and bring new ideas to the organization. Strategy: Coordinating gap analysis and aligning with governance frameworks such as ISO 27001, COBIT, and GAPP, while implementing those frameworks as appropriate. Additionally, it includes developing risk and controls mapping frameworks for reference by Starbucks Technology and assisting in the development of annual or multi-year ST Controls and Compliance Readiness program roadmaps. Advanced Technical Knowledge: Strong understanding of advanced cybersecurity concepts and tools. Security Strategy: Capability to contribute to the development and execution of the cybersecurity strategy. As a Starbucks partner, you (and your family) will have access to medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits. Partners have access to short-term and long-term disability, paid parental leave, family expansion reimbursement, paid vacation from date of hire*, sick time (accrued at 1 hour for every 25 hours worked), eight paid holidays, and two personal days per year. Starbucks also offers eligible partners participation in a 401(k) retirement plan with employer match, a discounted company stock program (S.I.P. ), Starbucks equity program (Bean Stock), incentivized emergency savings, and financial well-being tools. Additionally, Starbucks offers 100% upfront tuition coverage for a first-time bachelor's degree through Arizona State University's online program via the Starbucks College Achievement Plan, student loan management resources, and access to other educational opportunities. You will also have access to backup care and DACA reimbursement. Starbucks will comply with any applicable state and local laws regarding employee leave benefits, including, but not limited to providing time off pursuant to the Colorado Healthy Families and Workplaces Act, and in accordance with its plans and policies. This list is subject to change depending on collective bargaining in locations where partners have a certified bargaining representative. For additional information regarding partner perks and more detailed information about benefits, go to starbucksbenefits.com. If you are working in CA, CO, IL, LA, ME, MA, NE, ND or RI, you will accrue vacation up to a maximum of 120 hours (190 in CA) for roles below director and 200 hours (316 in CA) for roles at director or above. For roles in other states, you will be granted vacation time starting at 120 hours annually for roles below director and 200 hours annually for roles director and above. The actual base pay offered to the successful candidate will be based on multiple factors, including but not limited to job-related knowledge/skills, experience, geographical location, and internal equity. At Starbucks, it is not typical for an individual to be hired at the high end of the range for their role, and compensation decisions are dependent upon the facts and circumstances of each position and candidate. We believe we do our best work when we're together, which is why we're onsite four days a week. Join us and inspire with every cup. Apply today! Starbucks Coffee Company is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, or protected veteran status, or any other characteristic protected by law. Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances. Starbucks Coffee Company is committed to offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability, please contact us at applicantaccommodation@starbucks.com or 1(888) 611-2258.

Responsibilities

The cybersecurity analyst will provide governance advisory services and support the governance tools lifecycle process. Responsibilities include gathering and documenting policies, standards, and controls while collaborating with stakeholders to ensure compliance and reduce risk.