director, Technology Internal Audit

Starbucks•Seattle, WA

10d

About The Position

The Director, IT Audit plays a critical leadership role in strengthening Starbucks' technology control environment, technology risk management practices, cybersecurity governance, and resilience. The role provides strategic and operational oversight of IT audit activities, partners closely with technology and business leaders, and delivers objective assurance and advisory services that protect enterprise value and enable responsible technology transformation. The Director is expected to act as a trusted advisor on technology risk while balancing independence with collaboration across the enterprise. The Director leads a risk-based IT audit plan aligned with enterprise technology risks, business priorities, and the broader internal audit plan. The role manages and develops IT audit professionals, advances audit strategy and methodologies, and promotes the use of data analytics, automation, and continuous auditing. The role oversees technology, cybersecurity, cloud, infrastructure, application, data, third-party technology, integrated audits, and Sarbanes-Oxley testing. It ensures audit work follows applicable IIA Standards, internal quality guidelines, and recognized technology and cybersecurity control frameworks. The Director reviews and approves audit risk assessments, scopes, work programs, testing approaches, findings, and reports. The Director assesses technology control design and operating effectiveness, provides advisory support for major technology initiatives, identifies systemic risks, and communicates insights to senior leaders. The role builds relationships with technology, information security, data and privacy, business, compliance, legal, and external audit stakeholders; monitors remediation plans; supports Audit Committee materials as applicable; and prepares clear reporting on audit results and technology risks. Independence, objectivity, confidentiality, and appropriate handling of sensitive information are required throughout audit activities.

Requirements

10+ years of progressive experience in IT audit, technology risk, cybersecurity, information security, technology consulting, or a related discipline.
Prior experience leading IT audit teams and managing complex, cross-functional technology audits.
Strong knowledge of IT general controls, application controls, cybersecurity, cloud computing, systems development and implementation, data governance, and technology risk assessment methodologies.
Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Accounting, Finance, Business, or a related field.
CISA certification is required or strongly preferred.

Nice To Haves

Experience in a complex, highly regulated, or publicly traded environment with large-scale technology operations.
Demonstrated experience with technology and cybersecurity frameworks, audit technology tools, data analytics, automation, and continuous auditing techniques.
CIA, CISSP, CPA, CRISC, or equivalent certifications are valued.

Responsibilities

Lead the planning and execution of a risk-based IT audit plan aligned with enterprise technology risks, business priorities, and the broader internal audit plan.
Manage, coach, and develop IT audit professionals, fostering accountability, continuous improvement, technical excellence, and professional growth.
Advance IT audit strategy and methodologies and the use of data analytics, automation, and continuous auditing techniques.
Oversee technology, cybersecurity, cloud, infrastructure, application, data, third-party technology, and integrated audits, as well as Sarbanes-Oxley testing.
Ensure IT audit work adheres to applicable IIA Standards, internal quality guidelines, and recognized technology and cybersecurity control frameworks.
Review and approve IT audit risk assessments, scopes, work programs, testing approaches, findings, and final reports.
Assess the design and operating effectiveness of technology controls, including cybersecurity, identity and access management, change management, IT operations, data governance, cloud services, business continuity, and disaster recovery.
Provide proactive advisory support for major system implementations, technology transformations, cloud initiatives, cybersecurity programs, artificial intelligence, and emerging technologies.
Identify themes, trends, and systemic technology risks across audit activities and communicate insights to senior leadership.
Build relationships with technology leadership, information security, data and privacy leaders, business unit leaders, compliance, legal, and external auditors.
Communicate audit results clearly, translating technical risks into business impacts, root causes, and practical remediation recommendations.
Monitor technology-related management action plans and report on remediation progress, residual risk, and risk exposure.
Support Audit Committee materials and presentations, as applicable.
Prepare concise reporting on IT audit results, key technology risks, control issues, and cross-enterprise themes.
Maintain independence, objectivity, confidentiality, and appropriate handling of sensitive technology and security information.