director, cybersecurity - strategy, portfolio, and awareness

Starbucks Coffee Company•Seattle, WA

1d•$205,500 - $342,500•Onsite

About The Position

The Director, Cybersecurity – Strategy, Portfolio, and Awareness leads Starbucks’ Global Cybersecurity Services portfolio, strategy, and cybersecurity training and awareness functions in support of the Chief Information Security Officer (CISO). The role translates CISO direction and enterprise risk priorities into an integrated strategy, funded roadmap, and measurable program outcomes; leads portfolio prioritization and delivery governance; and owns training and awareness designed to strengthen secure behaviors across the business. The director provides the CISO and executive leaders with clear decisions, investment trade-offs, and evidence-based reporting, while partnering with cybersecurity domain owners who remain accountable for technical delivery and control effectiveness. The director develops and communicates cybersecurity strategy and operating plans for CISO approval, aligns them with business and technology priorities, and oversees portfolio planning, governance, delivery, financial tracking, and benefits realization. The position coordinates work across cybersecurity domains and business functions, prepares executive and Audit & Compliance Committee materials, and leads enterprise cybersecurity training and awareness strategy, campaigns, and effectiveness measurement. The role also builds and leads the strategy, portfolio/program management, and training and awareness team. It establishes team accountabilities and development expectations, coaches employees, plans succession, and aligns internal and external delivery capacity with approved priorities. The position is onsite four days a week.

Requirements

Bachelor’s degree in Information Security, Computer Science, or a related field and/or 10+ years of experience in a cybersecurity role, with a focus such as security operations, incident response, or risk management.
At least one technical certification is required; examples include CISSP, CISA, CIPP, CISM, and GSEC.
Expertise in multidisciplinary business principles and practices to steer cross-functional projects and initiatives toward strategic success.
Ability to navigate challenging conversations and achieve constructive, impactful outcomes, including high-level conflict resolution.
Exceptional written and verbal communication skills, including translating intricate technical subjects into understandable, business-centric communications.
Ability to orchestrate collaboration across departments and lead complex internal and external project teams, providing vision and unifying diverse perspectives.
Ability to communicate and advocate for strategic and tactical roadmaps and objectives to all levels of leadership and influence decisions with a high-level perspective.
Strong technical foundation and holistic understanding of information security technologies and principles, providing authoritative guidance and shaping information security strategies.

Nice To Haves

Demonstrated success leading a complex cybersecurity or technology portfolio, including prioritization, dependencies, resource planning, and measurable outcomes.
Experience translating business strategy and cyber risk into multi-year roadmaps, investment cases, and actionable operating plans.
Ability to turn complex risk, delivery, and financial information into concise, evidence-based recommendations for executives.
A successful history of building, leading, and developing multidisciplinary teams through delivery and organizational change.
Ability to align business, technology, Finance, and risk stakeholders and resolve competing priorities through influence and sound judgment.
Experience leading cybersecurity training, awareness, or behavior-change programs and evaluating their effectiveness.
Strong written and verbal communication, facilitation, and change leadership skills across executive, technical, and frontline audiences.

Responsibilities

Establish and maintain influential working relationships at all levels to advance cybersecurity strategy and enterprise risk outcomes.
Act as a trusted advisor and integrator for the CISO across strategy, execution, and communications.
Partner with senior leadership to identify priority opportunities, align them with enterprise objectives, and drive execution.
Develop, refresh, and communicate cybersecurity strategy and operating plans for CISO approval, translating business priorities, threat and risk insights, and regulatory obligations into objectives, investment choices, and accountable roadmaps.
Collaborate with cross-functional leaders to align cybersecurity work with Starbucks’ business strategy, technology priorities, and risk posture.
Own the integrated cybersecurity portfolio and program management function, including intake, prioritization, delivery standards, and benefits realization against approved strategy and commitments.
Establish decision forums, operating rhythms, accountability, and escalation thresholds; resolve issues within delegated authority and provide timely recommendations to the CISO on other decisions.
Maintain an integrated view of milestones, dependencies, capacity, delivery risks, and remediation commitments; drive recovery plans with accountable program and domain owners.
Lead multi-year roadmaps and annual planning with Finance and cybersecurity leaders, aligning investment, resource capacity, and sequencing with risk reduction and business priorities.
Define and report portfolio outcomes, key performance indicators, financial performance, and realized benefits, supported by clear data ownership and evidence.
Translate cybersecurity strategy and risk priorities into coordinated execution across domains including Identity, Data Protection, Threat Detection & Response, Governance Risk & Compliance, Product Security, and regional teams.
Partner with Finance, sourcing, and cybersecurity domain leaders to develop business cases, track approved spend and forecasts, evaluate investment trade-offs, and measure value delivered; support governance and compliance without assuming independent assurance responsibilities.
Identify gaps, overlaps, and execution risks across cybersecurity initiatives and drive resolution.
Own the planning, synthesis, and quality assurance of cybersecurity materials for executive leadership and the Audit & Compliance Committee, translating validated risk, delivery, and financial information into decisions, trade-offs, and actions for CISO review.
Own the enterprise cybersecurity training and awareness strategy, roadmap, and delivery, partnering with Partner Resources, Legal, Privacy, Communications, and business leaders to provide accessible, role-based learning for corporate and frontline partners.
Confirm audience scope, delivery resources, and interfaces with existing learning teams for training and awareness activities.
Lead behavior-focused awareness campaigns and learning interventions informed by relevant threats, incidents, and business workflows; coordinate delivery across regions and languages and, where in scope, licensed operations.
Measure training reach, completion, learning effectiveness, reporting behaviors, and human-risk trends; use findings to improve outcomes beyond completion rates alone.
Challenge and inspire partners across Global Cybersecurity Services to achieve enterprise outcomes.
Build and lead the portfolio/program management, strategy, and training and awareness team, setting accountabilities, priorities, and development expectations.
Develop team capability through coaching, feedback, succession planning, and career opportunities; align employee and external delivery capacity with approved priorities.
Support leadership capability development, succession planning, and organizational effectiveness.
Promote a culture of accountability, collaboration, and continuous improvement.

Benefits

Medical, dental, and vision insurance.
Basic and supplemental life insurance and other voluntary insurance benefits.
Short-term and long-term disability.
Paid parental leave and family expansion reimbursement.
Paid vacation from date of hire and accrued sick time.
Eight paid holidays and two personal days per year.
401(k) retirement plan with employer match for eligible partners.
Discounted company stock program (S.I.P.) and Starbucks equity program (Bean Stock).
Incentivized emergency savings and financial well-being tools.
100% upfront tuition coverage for a first-time bachelor’s degree through Arizona State University’s online program via the Starbucks College Achievement Plan.
Student loan management resources and access to other educational opportunities.
Backup care and DACA reimbursement.