Now Brewing – information security, corrective action product manager! #tobeapartner
From the beginning, Starbucks set out to be a different kind of company. One that not only celebrated coffee and the rich tradition, but that also brought a feeling of connection. At Starbucks, our mission is to inspire and nurture the limitless possibilities of human connection – one person, one cup, and one neighborhood at a time. We are known for developing extraordinary leaders who share this passion and are guided by their service to others. Starbucks technologists work to achieve this mission with cutting-edge technology delivered to our partners, customers, stores, roasters, and global communities.
This position reports to the manager of Risk within the Starbucks Global Cybersecurity Services (GCS) organization. GCS is chartered with leading, inspiring, and supporting Starbucks to cultivate trust in our brand by ensuring confidentiality, integrity, & availability in every partner, customer & supplier experience.
As the corrective action product manager, you will support the risk function and specifically the Corrective Action program within the Governance, Risk, and Compliance service portfolio. This product manager will be responsible for designing, operating, and managing a comprehensive, risk-based Corrective Action Program to identify, triage, prioritize, and manage technology risks through their lifecycle.
To be successful, the corrective action product manager needs to have demonstrated passion for learning, willingness to dive into the details, a drive to improve existing ways of working, and a desire to delight with outstanding service.
As an information security corrective action product manager, you will
Develop operational plans for the work group, manage execution, and measure results while modeling how we work together. Collect, aggregate, and create requirements to work with stakeholders to identify ROI/business value, and lead prioritization of the backlog. Lead feedback loops and coordinated efforts to partner with business and technology functions to assist in resolution of vulnerabilities, compliance violations and control gaps.Use Kanban, Agile or other Kaizen management models for work prioritization and continuous improvement, to manage tradeoffs on scope, resources, timeline on small sized feature sets.Prepare, communicate, and educate stakeholders on changes in policies and practices within the organization.Provide consulting and support to ensure use and maintenance of correct risk management tools and processes.
We’d love to hear from people with:
4+ years of progressive industry experience in Information Risk Management, IT Governance, IT Risk, Data Privacy, Cybersecurity or Internal/External Technology Audit disciplines, with at least two of those years in an IT or a software development setting.Demonstrated ability to use analytics and optimization tools to inform product planning and prioritization (4 years)Demonstrated ability to work with GRC Technology Team to deliver customer facing features (4 years) 4+ years of industry experience in a technology environment with a record of successfully delivering complex products.Bachelor’s degree in computer science, Information Technology, Business, or relevant field Ability to work within large organizations to collaborate and drive cross-functional efforts and build partnerships to secure the resources necessary to achieve goals.Certifications such as CISA, CISSP, PCI ISA/QSA, CISM, CIPM or others focused on controls assurance, information security, data privacy or information risk management is a strong plus.Detailed and results-oriented, able to analyze data to justify product decisions and apply key learnings.Strong verbal and written communications skills including technology leadership level communications.Consistently uses communications skills to influence outcomes within a known skill set.Ability to balance multiple priorities and meet deadlines.Ability to thoroughly understand complex business and technical issues and influence decision making.Hands on experience in developing roadmaps, story outlines, writing user stories, refining product backlogs, and coordinating/prioritizing conflicting requirements across teams in a fast-paced, changing environment.Ability to apply knowledge of multidisciplinary business principles and practices to achieve successful outcomes in cross-functional projects and activities.
As a Starbucks partner, you (and your family) will have access to medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits. Partners have access to short-term and long-term disability, paid parental leave, family expansion reimbursement, paid vacation from date of hire*, sick time (accrued at 1 hour for every 25 hours worked), eight paid holidays, and two personal days per year. Starbucks also offers eligible partners participation in a 401(k) retirement plan with employer match, a discounted company stock program (S.I.P.), Starbucks equity program (Bean Stock), incentivized emergency savings, and financial well-being tools.Additionally, Starbucks offers 100% upfront tuition coverage for a first-time bachelor’s degree through Arizona State University’s online program via the Starbucks College Achievement Plan, student loan management resources, and access to other educational opportunities.You will also have access to backup care and DACA reimbursement.Starbucks will comply with any applicable state and local laws regarding employee leave benefits, including, but not limited to providing time off pursuant to the Colorado Healthy Families and Workplaces Act, and in accordance with its plans and policies. This list is subject to change depending on collective bargaining in locations where partners have a certified bargaining representative. For additional information regarding partner perks and more detailed information about benefits, go to starbucksbenefits.com.
*If you are working in CA, CO, IL, LA, ME, MA, NE, ND or RI, you will accrue vacation up to a maximum of 120 hours (190 in CA) for roles below director and 200 hours (316 in CA) for roles at director or above.For roles in other states, you will be granted vacation time starting at 120 hours annually for roles below director and 200 hours annually for roles director and above.
The actual base pay offered to the successful candidate will be based on multiple factors, including but not limited to job-related knowledge/skills, experience, geographical location, and internal equity. At Starbucks, it is not typical for an individual to be hired at the high end of the range for their role, and compensation decisions are dependent upon the facts and circumstances of each position and candidate.
If you live in thegreater Seattle area, we offer aflexible workplace that allows forhybrid work. Partnerscan work remotely up to two days per week.
Join us and inspire with every cup. Apply today!
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, physical or mental disability, sexual orientation, marital status, military or veteran status, gender identity and expression, genetic information, or any other factor protected by law.
We are committed to creating a diverse and welcoming workplace that includes partners with diverse backgrounds and experiences. We believe that enables us to better meet our mission and values while serving customers throughout our global communities. People of color, women, LGBTQIA+, veterans and persons with disabilities are encouraged to apply.
Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal state and local ordinances. Starbucks Corporation is committed to offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability, please contact us at .