S

Starbucks

Runs coffeehouses and licenses its coffee brand

Director: Cybersecurity - Strategy, Portfolio, and Awareness

CybersecurityPosted on Nov 12
Full-timeSeattle, WA, USANo salary listed

About the Job

Requirements

  • A bachelor's degree in Information Security, Computer Science, or a related field, and/or 10+ years of experience in a cybersecurity role focused on areas such as security operations, incident response, or risk management.
  • At least one technical certification is required, such as CISSP, CISA, CIPP, CISM, or GSEC.
  • Expertise in multidisciplinary business principles and practices to steer cross-functional projects and initiatives toward strategic success.
  • Ability to navigate challenging conversations and lead constructive outcomes, including conflict resolution at a high level.
  • Written and verbal communication skills to translate intricate technical subjects into understandable, business-centric communications.
  • Ability to orchestrate collaboration across departments and lead complex internal and external project teams.
  • Ability to communicate and advocate for strategic and tactical roadmaps and objectives to all tiers of leadership and guide decisions.
  • A robust technical foundation and holistic understanding of multiple facets of information security technologies and principles.

Responsibilities

  • Establish and maintain influential working relationships at all levels to advance cybersecurity strategy and enterprise risk outcomes.
  • Act as a trusted advisor and integrator for the CISO across strategy, execution, and communications.
  • Partner with senior leadership to identify priority opportunities, align them to enterprise objectives, and drive execution.
  • Lead development, refresh, and communication of the cybersecurity strategy and operating plan for CISO approval, translating business priorities, threat and risk insights, and regulatory obligations into objectives, investment choices, and accountable roadmaps.
  • Collaborate with cross-functional leaders to align with Starbucks business strategy, technology priorities, and risk posture.
  • Own the integrated cybersecurity portfolio and program management function, including intake, prioritization, delivery standards, and benefits realization against approved strategy and commitments.
  • Establish decision forums, operating rhythms, accountability, and escalation thresholds; resolve issues within delegated authority and bring recommendations to the CISO for decisions beyond it.
  • Maintain an integrated view of milestones, dependencies, capacity, delivery risks, and remediation commitments, and drive recovery plans with accountable program and domain owners.
  • Lead multi-year roadmaps and annual planning with Finance and cybersecurity leaders, aligning investment, resource capacity, and sequencing to risk reduction and business priorities.
  • Define and report portfolio outcomes, key performance indicators, financial performance, and realized benefits, with clear data ownership and evidence supporting executive decisions.
  • Translate cybersecurity strategy and risk priorities into coordinated execution across domains including Identity, Data Protection, Threat Detection & Response, Governance Risk & Compliance, Product Security, and regional teams.
  • Partner with Finance, sourcing, and cybersecurity domain leaders to develop business cases, track approved spending and forecasts, evaluate investment trade-offs, and measure value delivered; support governance and compliance without assuming independent assurance responsibilities.
  • Identify gaps, overlaps, and execution risks across cybersecurity initiatives and drive resolution.
  • Own planning, synthesis, and quality assurance of cybersecurity materials for executive leadership and the Audit & Compliance Committee, translating validated risk, delivery, and financial information into decisions, trade-offs, and actions for CISO review.
  • Own the enterprise cybersecurity training and awareness strategy, roadmap, and delivery, partnering with Partner Resources, Legal, Privacy, Communications, and business leaders to provide accessible, role-based learning for corporate and frontline partners.
  • Confirm audience scope, delivery resources, and interfaces with existing learning teams so training and awareness accountability is achievable.
  • Lead behavior-focused awareness campaigns and learning interventions informed by relevant threats, incidents, and business workflows; coordinate delivery across regions and languages and, where in scope, licensed operations.
  • Measure training reach, completion, learning effectiveness, reporting behaviors, and human-risk trends, and use findings to improve outcomes.
  • Challenge and inspire partners across Global Cybersecurity Services to achieve enterprise outcomes.
  • Build and lead the portfolio/program management, strategy, and training and awareness team, setting accountabilities, priorities, and development expectations.
  • Develop team capability through coaching, feedback, succession planning, and career opportunities; align employee and external delivery capacity to approved priorities.
  • Support development of leadership capability, succession planning, and organizational effectiveness.
  • Promote a culture of accountability, collaboration, and continuous improvement.

Desired Qualifications

  • Demonstrated success leading a complex cybersecurity or technology portfolio, including prioritization, dependencies, resource planning, and measurable outcomes.
  • Experience translating business strategy and cyber risk into multi-year roadmaps, investment cases, and actionable operating plans.
  • Ability to turn complex risk, delivery, and financial information into concise, evidence-based recommendations for executives.
  • A successful history of building, leading, and developing multidisciplinary teams through delivery and organizational change.
  • Ability to align business, technology, Finance, and risk stakeholders and resolve competing priorities through influence and sound judgment.
  • Experience leading cybersecurity training, awareness, or behavior-change programs and evaluating their effectiveness.
  • Written and verbal communication, facilitation, and change leadership skills across executive, technical, and frontline audiences.

About the Company

Starbucks

Runs coffeehouses and licenses its coffee brand

Starbucks runs coffeehouses around the world that serve espresso drinks, brewed coffee, tea, and food, and it roasts the arabica coffee its stores sell. It grew from a single Seattle shop selling beans into the world's largest coffeehouse chain, and it helped make Italian-style espresso drinks such as lattes an everyday habit in the United States. Customers order at the counter, at drive-throughs, or ahead through the Starbucks app, whose rewards program trades points for free drinks and food. The company earns money from cafés it operates itself and from fees paid by licensed stores in places such as airports and grocery stores. Starbucks was founded in 1971 and is based in Seattle.

Company size
10,001+
Company stage
IPO
Headquarters
Seattle, WA
Founded
1971

Recently Posted Jobs

Explore more opportunities at Starbucks

See more jobs