director cybersecurity, portfolio management

Now Brewing - director cybersecurity, portfolio management! #tobeapartner

From the beginning, Starbucks set out to be a different kind of company. One that not only celebrated coffee and the rich tradition, but that also brought a feeling of connection. We are known for developing extraordinary leaders who share this passion and are guided by their service to others.

At Starbucks, our mission is to inspire and nurture the human spirit – one person, one cup, and one neighborhood at a time. Starbucks Technologists work to achieve this mission using secure, resilient, and innovative technology delivered to our partners, customers, stores, roasters, and global communities.

This position contributes to Starbucks’ success by serving as a strategic and operational extension of the Chief Information Security Officer (CISO). The role enables execution, alignment, and transparency across the Global Cybersecurity Services organization by coordinating priorities, programs, strategic communications and awareness, and delivery across a diverse cybersecurity portfolio. The director ensures initiatives are aligned to enterprise strategy, risk priorities, and regulatory expectations and are delivered in a disciplined, timely, and effective manner.

As a director cybersecurity, portfolio management, you will...

Leadership - Setting goals for the work group, developing organizational capability, and modeling how we work together:

• Establishes and maintains influential working relationships at all levels necessary to advance cybersecurity strategy and enterprise risk outcomes.
• Acts as a trusted advisor and integrator for the CISO across strategy, execution, and communications.
• Partners with senior leadership to identify priority opportunities, align them to enterprise objectives, and drive execution.
• Supports the definition and communication of cybersecurity strategy, operating model, and execution priorities to internal and external stakeholders.
• Collaborates with cross-functional leaders to ensure alignment with Starbucks business strategy, technology priorities, and risk posture.

Planning and Execution - Developing strategic and operational plans for the work group, managing execution, and measuring results:

• Drives execution discipline across the cybersecurity portfolio, ensuring alignment to approved strategies, roadmaps, and commitments.
• Establishes governance mechanisms, operating rhythms, escalation paths, and decision forums across Global Cybersecurity Services.
• Maintains visibility into delivery progress, dependencies, risks, and trade-offs and escalates issues as needed.
• Supports multi-year planning, prioritization, and sequencing of cybersecurity initiatives across domains and regions.
• Ensures consistent measurement and reporting of outcomes, risks, and performance metrics.

Business Requirements - Providing functional expertise and executing functional responsibilities:

• Translates cybersecurity strategy and risk priorities into coordinated execution across domains such as Identity, Data Protection, Threat Detection & Response, Governance Risk & Compliance, Product Security, and regional teams.
• Facilitates governance and compliance to ensure cybersecurity investments are optimized and aligned to enterprise standards.
• Identifies gaps, overlaps, and execution risks across cybersecurity initiatives and drives resolution.
• Leads synthesis of materials for executive leadership, Audit & Compliance Committee, and Board-level discussions.
• Supports engagement with Legal, Privacy, Finance, and external auditors as required.

Partner Development & Team Building - Providing partners with coaching, feedback, and developmental opportunities and building effective teams:

• Challenges and inspires partners across Global Cybersecurity Services to achieve enterprise outcomes.
• Provides coaching, feedback, and leadership support to the team, senior leaders, and key contributors.
• Ensures the team is growing in terms of skills, impact, performance management, and career development.
• Supports development of leadership capability, succession planning, and organizational effectiveness.
• Promotes a culture of accountability, collaboration, and continuous improvement.

We would love to hear from people with...

• Thorough familiarity and expertise with project management tools, techniques, methodologies, and best practices.
• The ability to apply knowledge of and learn new multidisciplinary business principles and practices to achieve successful outcomes in cross-functional projects and activities.
• The ability to tell stories and simplify complex work using analysis and data-backed evidence.
• A successful history of developing, leading. and mentoring teams through service delivery and change.
• Ability to establish cross-functional, collaborative relationships with business and technology partners.
• Strong critical thinking skills with a proven track record of delivery.
• Exceptional communication and presentation skills, both orally and in writing.
• Bachelor’s degree in Information Security, Computer Science, or a related field and/or 10+ years of experience in a cybersecurity role, with a focus on areas such as security operations, incident response, or risk management
• Experience in cybersecurity, technology, risk, or enterprise operations.
• Experience operating at an executive interface and influencing outcomes without direct authority.
• Strong familiarity with cybersecurity frameworks and enterprise risk management practices (e.g., NIST CSF, ISO 27001).
• Demonstrated executive communication skills, including preparation of Board-level materials.