information security corrective action, data analyst

Now Brewing - information security corrective action data analyst! #tobeapartner

From the beginning, Starbucks set out to be a different kind of company. One that not only

celebrated coffee and the rich tradition, but that also brought a feeling of connection. At Starbucks, our mission is to inspire and nurture the limitless possibilities of human connection - one person, one cup, and one neighborhood at a time. We are known for developing extraordinary leaders who share this passion and are guided by their service to others. Starbucks technologists work to achieve this mission with innovative technology delivered to our partners, customers, stores, roasters, and global communities.

This position reports to the manager of Risk within the Starbucks Global Cybersecurity Services (GCS) organization. GCS is chartered with leading, inspiring, and supporting Starbucks to cultivate trust in our brand by ensuring confidentiality, integrity, & availability in every partner, customer & supplier experience.

As the corrective action data analyst, you will support the risk function and specifically the Corrective Action program within the Governance, Risk, and Compliance (GRC) service portfolio. This data analyst will be responsible for collecting, aggregating, analyzing, and visually communicating the information to enable the triage and prioritization of risks through their lifecycle.

To be successful, the corrective action data analyst needs to have demonstrated passion for learning, willingness to dive into the details, a drive to improve existing ways of working, and a desire to delight with outstanding service.

As an information security corrective action data analyst, you will...

• Support risk management processes to identify, triage, manage, report and drive technology identified corrective actions toward resolution.

• Manage the team's Corrective Action support queue, work to analyze risk, triage, and escalate to teammates according to priority and required expertise. The requires the initiative to gather information, convey accurate and timely status, and use GRC tools for reporting, data analysis, and troubleshooting.

• Build procedural documentation (e.g., process flows, data flow maps, SOP's) or other work instructions to support the cybersecurity, risk program (e.g., Wiki, Knowledge Base Articles).

• Drives continuous improvement of risk management and corrective action processes by participating in the scrum team (agile methodology) with the GRC risk team.

• Be receptive and responsive to coaching and guidance from leaders and more experienced team members while seeking input and support, as required.

We'd love to hear from people with:

• Experience in IT compliance (SOX, PCI, internal controls), IT risk management (NIST, ISO27001), Internal Audit or Data Privacy fields, or in a related area, 0-2+ years of relevant experience

• Ability to apply knowledge of multidisciplinary business principles and practices to support successful outcomes in projects and activities.

• Basic understanding of risk, controls and compliance and technology governance concepts.

• Ability to use knowledge, sound judgment, and resourcefulness to support the design and deployment of global risk management processes.

• Ability to balance multiple priorities and meet deadlines.

• Certifications such as CISSP, CISA, CIPP, or others focused on information security, data privacy or information risk management is desired.

• GRC/Cybersecurity Technology (Archer, ServiceNow, Brinqa) knowledge a plus

• Strong written and verbal communication.

From free coffee to competitive pay, Starbucks is proud to offer a comprehensive compensation and benefits package to our eligible part-time and full-time partners. Benefits include 100% tuition coverage through our Starbucks College Achievement Plan, health coverage with a variety of plans to choose from, and stock & savings programs like our equity reward program, Bean Stock. What's more, Starbucks offers flexible scheduling and opportunities for paid time off. Visit ~~~ for details.

If you live in the greater Seattle area, we offer a flexible workplace that allows for hybrid work. Partners can work remotely up to two days per week.

Join us and inspire with every cup. Apply today!

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

We are committed to creating a diverse and welcoming workplace that includes partners with diverse backgrounds and experiences. We believe that enables us to better meet our mission and values while serving customers throughout our global communities. People of color, women, LGBTQIA+, veterans and persons with disabilities are encouraged to apply.

Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal state and local ordinances. Starbucks Corporation is committed to offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability, please contact us at ~~~ or via email at ~~~.