senior cybersecurity analyst at Starbucks Coffee Company

Seattle, Washington, United States -

Full Time

Start Date

Immediate

Expiry Date

05 Jun, 26

Salary

201300.0

Posted On

07 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity, Compliance Programs, Risk Management, GRC Platforms, IRM Platforms, SOX, PCI DSS, SWIFT, ISO/IEC 27001, NIST CSF, Automation, Control Monitoring, Agile Delivery, Data Modeling, API Scripting, Risk Assessment

Industry

Retail

Description

Job Summary and Mission This role supports Starbucks Technology by driving compliance programs—including SOX, PCI, SWIFT, and emerging regulations—through effective risk‑to‑control alignment and scalable compliance operations. The cybersecurity analyst senior partners across GCS, ST, and business teams to develop and improve enterprise compliance services, requiring strong interpersonal skills and clear communication. The role designs and maintains GRC capabilities across policies, standards, controls, assessments, and automation. The ideal candidate brings deep IT compliance expertise and hands‑on experience with GRC/IRM platforms, enabling continuous control monitoring, evidence automation, and actionable risk insights. This position operates with significant independence, proactively identifying requirements, improving processes, and leading cross‑functional change. Summary of Key Responsibilities Leadership – Serve as a subject-matter expert across key technology compliance domains (e.g., SOX ITGC, PCI DSS, SWIFT, ISO/IEC 27001, NIST CSF/800-53, SOC 2), navigating cross-functional dependencies and translating regulatory obligations into actionable, risk-based controls. Partners with managers, engineers, and cross-functional teams to drive compliance within technology products and solutions, build strong working relationships, and provide advisory support that aligns requirements, policies, standards, and controls that reduce risk and strengthen operational resilience Develop training and reusable templates to help compliance scale across the enterprise Operate in a largely self-directed manner; escalate risks and decisions appropriately. Solution Design and Automation – Lead compliance automation initiatives to streamline control execution, validation, evidence collection, and monitoring through scalable, technology-driven workflows. Design and configure Governance Risk Compliance (GRC)/Integrated Risk Management (IRM) capabilities (e.g. control libraries, issues and risk management, assessments, evidence orchestration), integrating with enterprise systems to automate data flows, control testing, and compliance reporting. Enable continuous control monitoring by defining data models, automation patterns (APIs, eventing, scripting), with an increasing focus on AI-assisted detection, testing, and anomaly identification to reduce manual effort and expand assurance coverage. Build intelligent dashboards and metrics that visualize control health, risk posture, findings, exceptions, and remediation progress, incorporating role-based experiences and leveraging AI/ML insights to surface emerging risks and control degradation trends. Continuously identify and implement automation, standardization, and reuse opportunities to improve productivity, quality, and cost efficiency. Compliance Program Operations – Design risk and control matrices that support regulatory requirements and internal standards. Provide consulting and guidance to ensure effective use of compliance and risk‑management tools and processes. Develop budget recommendations to support compliance initiatives and program maturity. Own multiple compliance products and maintain deep knowledge of relevant Starbucks and industry domain areas. Apply LEAN and user‑centered design techniques to simplify compliance processes and improve partner experience. Administer and support GRC tools and integrations, including triaging requests, managing queues against SLAs, and coordinating with vendors and cross‑functional teams. Develop and maintain documentation (wikis, knowledge articles, runbooks) and deliver training on compliance services, tooling, and governance processes. Coordinate and execute control assessments, readiness reviews, and walkthroughs, collecting and validating evidence for internal and external audits. Perform root‑cause analysis and drive durable remediation through control improvements, process changes, or automation. Track and report remediation status, risk acceptance, and exceptions in partnership with control owners and audit stakeholders. Agile Delivery – Own and refine the compliance services backlog by creating user stories, defining acceptance criteria, and driving delivery within agile sprint cadences. Manage GRC/compliance products and services, applying continuous improvement to mature capabilities over time. Collaborate with stakeholders to define requirements, assess business value, prioritize backlog items, and maintain user personas that support the compliance program. Define controls and compliance goals, KPIs, and measurement plans to evaluate program effectiveness with minimal oversight. Balance scope, capacity, and timelines to deliver small feature sets and enhancements aligned to business and compliance outcomes. Develop strategic and operational plans for compliance services, ensuring effective execution and measurable results. Basic Qualifications Bachelor's degree in computer science or related field or 3+ years of relevant experience. Apply knowledge of business principles and technology practices to achieve successful outcomes in cross-functional activities. Excellent analytical and problem-solving skills. Generate comprehensive documentation in support of systems. Exhibit exception oral and written interpersonal and communication skills. Experience with Microsoft Office products such as Word, Excel, and PowerPoint proficiently. Apply a deep understanding of business processes and process improvement initiatives. Provide top-tier customer service. Implement system development concepts effectively. Proven working knowledge of system development lifecycle and IT operations. Ability to use business knowledge, sound judgement, and resourcefulness to design and deploy highly reliable and sustainable technology solutions. Ability to balance multiple priorities and meet deadlines. Configuration knowledge of relevant applications/modules/platforms. Preferred Qualifications 3+ years of progressive industry experience in Information Risk Management, IT Governance, IT Compliance, Data Privacy or Internal/External Technology Audit disciplines, with at least two of those years in an IT or a software development setting. Exposure to Common Control Framework (CCF) practices with knowledge and ability to track common control requirements across numerous security and regulatory standards Ability to work within large organizations to collaborate and drive cross-functional efforts, and build partnerships to secure the resources necessary to achieve goals Certifications such as CISA, CISSP, CISM, CIPM or others focused on controls assurance, information security, data privacy or information risk management is a strong plus Detailed and results-oriented, able to analyze data to justify product decisions and apply key learnings. Strong verbal and written communications skills Consistently uses communications skills to influence outcomes within a known skill set Ability to balance multiple priorities and meet deadlines Ability to thoroughly understand complex business and technical issues and influence decision making Hands on experience in developing roadmaps, story outlines, writing user stories, refining product backlogs, and coordinating/prioritizing conflicting requirements across teams in a fast-paced, changing environment Ability to apply knowledge of multidisciplinary business principles and practices to achieve successful outcomes in cross-functional projects and activities Experience in engineering and/or platform role for GRC solutions and/or cybersecurity risk management solutions. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. We are committed to creating a diverse and welcoming workplace that includes partners with diverse backgrounds and experiences. We believe that enables us to better meet our mission and values while serving customers throughout our global communities. People of color, women, LGBTQIA+, veterans and persons with disabilities are encouraged to apply. Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal state and local ordinances. Starbucks Corporation is committed to offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability, please contact us at applicantaccommodation@starbucks.com.

Responsibilities

This senior analyst supports Starbucks Technology by driving compliance programs such as SOX, PCI, and SWIFT, requiring effective risk-to-control alignment and scalable compliance operations. The role involves designing and maintaining GRC capabilities across policies, standards, controls, assessments, and automation while leading compliance automation initiatives.