Now Brewing - senior cybersecurity analyst! #tobeapartnerFrom the beginning, Starbucks set out to be a different kind of company. One that not only celebrated coffee and the rich tradition, but that also brought a feeling of connection. At Starbucks, our mission is to inspire and nurture the limitless possibilities of human connection – one person, one cup, and one neighborhood at a time. We are known for developing extraordinary leaders who share this passion and are guided by their service to others. Starbucks technologists work to achieve this mission with innovative technology delivered to our partners, customers, stores, roasters, and global communities.A successful senior cybersecurity analyst at Starbucks is collaborative, organized, and able to work well through change and ambiguity. This position reports to the manager of cybersecurity risk within the Global Cybersecurity Services (GCS) organization. GCS is chartered with leading, inspiring, and supporting Starbucks to cultivate trust in our brand by ensuring confidentiality, integrity, & availability in every partner, customer & supplier experience.This job contributes to Starbucks' success by facilitating and managing a risk management program and processes to aid in the mitigation of cyber risks. Success for the role will be the delivery of clear, consistent, and globally integrated cybersecurity operational risk services and will be measured by program adoption and risk reduction metrics. Multiple stakeholder groups rely on the effective delivery of repeatable and data-driven risk services and functions across the cybersecurity organization. This role is essential to drive down overall cyber security risks at Starbucks.As a senior cybersecurity analyst, you will...Must have an operational knowledge of risk management programsMust have an operational knowledge of Issue and Exception management Experience in implementing and operating risk management programs Ability to lead key program initiatives from inception to delivery and adoptionEstablish and manage outcome-based initiatives using standardized processes and industry best practicesAbility to adjust speed of delivery based on program maturity, adoption, and capacityCross-industry consulting experience preferredKnowledge of security, data privacy, compliance, regulatory requirementsWorking knowledge of industry frameworks, methodologies including NIST, ISO, COSOMust hold at least one of the industry security/privacy certifications including CISM, CRISC, CIPP, CISSPExperience in developing key metrics and reporting on program performance to leadershipClear understanding and management of GRC Security Domains including risks within Cybersecurity, data privacy, continuity, vulnerability, incidents, and emerging areas such as GenAIAbility to collaborate with technical teams including Security Architecture/Engineering, International teams, and leadershipAbility to manage multiple initiatives and prioritize workload based on changing business needs and team prioritiesAbility to develop and drive requirements to support program enhancements and experience in release managementAbility to ensure complete, accurate, and timely data management across risk and GRC programs, supporting reliable decision making and reportingAbility to leverage data and analysis to identify trends, emerging risks, and control gaps, translating data sets into actionable outcomes Dedicated to value creation and delivering quality outcomes/deliverables that aligns to meeting business objectivesExperience in delivering security/risk training and performing knowledge transfer to team members as requiredAbility to foster “can-do” attitude and lead by example We'd love to hear from people with...Bachelor’s degree in computer science or a related field or 3+ of relevant experience.Apply knowledge of business principles and technology practices to achieve successful outcomes in cross-functional activities.Excellent analytical and problem-solving skills.Expertly align systems to business needs.Generate comprehensive documentation in support of systems.Exhibit exceptional oral and written interpersonal and communication skills.Apply a deep understanding of business processes and process improvement initiatives.Implement systems development concepts effectively.Proven working knowledge of systems development lifecycle and IT operations.Ability to use business knowledge, sound judgment, and resourcefulness to design and deploy highly reliable and sustainable technology solutions.Ability to balance multiple priorities and meet deadlines.Configuration knowledge of relevant applications/modules/platforms. As a Starbucks partner, you (and your family) will have access to medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits. Partners have access to short-term and long-term disability, paid parental leave, family expansion reimbursement, paid vacation from date of hire*, sick time (accrued at 1 hour for every 25 hours worked), eight paid holidays, and two personal days per year. Starbucks also offers eligible partners participation in a 401(k) retirement plan with employer match, a discounted company stock program (S.I.P.), Starbucks equity program (Bean Stock), incentivized emergency savings, and financial well-being tools. Additionally, Starbucks offers 100% upfront tuition coverage for a first-time bachelor’s degree through Arizona State University’s online program via the Starbucks College Achievement Plan, student loan management resources, and access to other educational opportunities. You will also have access to backup care and DACA reimbursement. Starbucks will comply with any applicable state and local laws regarding employee leave benefits, including, but not limited to providing time off pursuant to the Colorado Healthy Families and Workplaces Act, and in accordance with its plans and policies. This list is subject to change depending on collective bargaining in locations where partners have a certified bargaining representative. For additional information regarding partner perks and more detailed information about benefits, go to . *If you are working in CA, CO, IL, LA, ME, MA, NE, ND or RI, you will accrue vacation up to a maximum of 120 hours (190 in CA) for roles below director and 200 hours (316 in CA) for roles at director or above. For roles in other states, you will be granted vacation time starting at 120 hours annually for roles below director and 200 hours annually for roles director and above. The actual base pay offered to the successful candidate will be based on multiple factors, including but not limited to job-related knowledge/skills, experience, geographical location, and internal equity. At Starbucks, it is not typical for an individual to be hired at the high end of the range for their role, and compensation decisions are dependent upon the facts and circumstances of each position and candidate. We believe we do our best work when we're together, which is why we're onsite four days a week.Join us and inspire with every cup. Apply today! Starbucks Coffee Company is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, or protected veteran status, or any other characteristic protected by law. Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances. Starbucks Coffee Company is committed to offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability, please contact us at applicantaccommodation@ or 1(888) 611-2258.
Job Title
senior cybersecurity analyst, risk