director, Technology Internal Audit

Job Summary and Mission:

The Director, IT Audit plays a critical leadership role in strengthening Starbucks' technology control environment, technology risk management practices, cybersecurity governance, and resilience. This role provides strategic and operational oversight of IT audit activities, partners closely with technology and business leaders, and delivers objective assurance and advisory services that protect enterprise value and enable responsible technology transformation.

The Director is expected to operate as a trusted advisor on technology risk, balancing independence with strong collaboration across the enterprise.

Summary of Key Responsibilities:

Leadership & Strategy

Lead the planning and execution of a risk-based IT audit plan aligned with enterprise technology risks, business priorities, and the broader internal audit plan.

Manage, coach, and develop IT audit professionals; foster a culture of accountability, continuous improvement, technical excellence, and professional growth.

Advance the IT audit strategy, methodologies, and use of data analytics, automation, and continuous auditing techniques.

Audit Execution & Oversight

Oversee technology, cybersecurity, cloud, infrastructure, application, data, third-party technology, and integrated audits and Sarbanes Oxley (SOX) testing to ensure high-quality, timely, and actionable results.

Ensure IT audit work adheres to applicable professional standards (IIA Standards), internal quality guidelines, and recognized technology and cybersecurity control frameworks.

Review and approve IT audit risk assessments, scopes, work programs, testing approaches, findings, and final reports.

Risk Management & Advisory

Assess the design and operating effectiveness of technology controls, including cybersecurity, identity and access management, change management, IT operations, data governance, cloud services, business continuity, and disaster recovery.

Provide proactive advisory support for major system implementations, technology transformations, cloud initiatives, cybersecurity programs, artificial intelligence, and other emerging technologies.

Identify themes, trends, and systemic technology risks across audit activities and communicate insights to senior leadership.

Stakeholder Management

Build strong relationships with technology leadership, information security, data and privacy leaders, business unit leaders, compliance, legal, and external auditors.

Communicate IT audit results clearly and persuasively, translating complex technical risks into business impact, root causes, and practical remediation recommendations.

Monitor technology-related management action plans and report on remediation progress, residual risk, and risk exposure.

Governance & Reporting

Support Audit Committee materials and presentations, as applicable.

Prepare concise, impactful reporting on IT audit results, key technology risks, control issues, and cross-enterprise themes.

Maintain independence, objectivity, confidentiality, and appropriate handling of sensitive technology and security information in all audit activities.

Summary of Experience:

Required

10+ years of progressive experience in IT audit, technology risk, cybersecurity, information security, technology consulting, or a related discipline.

Prior experience leading IT audit teams and managing complex, cross-functional technology audits.

Strong knowledge of IT general controls, application controls, cybersecurity, cloud computing, systems development and implementation, data governance, and technology risk assessment methodologies.

Preferred

Experience in a complex, highly regulated, or publicly traded environment with large-scale technology operations.

Demonstrated experience with technology and cybersecurity frameworks, audit technology tools, data analytics, automation, and continuous auditing techniques.

Education and Certification:

Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Finance, Business, or a related field.

Professional certification(s): CISA required or strongly preferred; CIA, CISSP, CPA, CRISC, or equivalent certifications are also valued.

Starbucks Coffee Company is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, or protected veteran status, or any other characteristic protected by law.

Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.

Starbucks Coffee Company is committed to offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability, please contact us at applicantaccommodation@starbucks.com or 1(888) 611-2258