Senior cybersecurity analyst, threat detection

- Act as a subject-matter expert in technology compliance areas (e.g., SOX ITGC, PCI DSS, SWIFT, ISO/IEC 27001, NIST CSF/800-53, SOC 2), managing regulatory obligations into effective controls. - Collaborate with managers, engineers, and cross-functional teams to promote compliance in technology products, fostering relationships and providing advisory support. - Create training materials and reusable templates to facilitate compliance scaling across the organization. - Work independently while appropriately escalating risks and decision points. - Spearhead compliance automation initiatives for efficient control execution, validation, and monitoring. - Design and implement Governance Risk Compliance (GRC) capabilities integrated with enterprise systems for automated processes and reporting. - Establish continuous control monitoring through defined data models and automation patterns, focusing on AI-assisted detection. - Develop dashboards and metrics for visualizing control health, risk posture, and remediation progress. - Identify and implement opportunities for automation, standardization, and reuse to enhance productivity and efficiency. - Create risk and control matrices to comply with regulatory standards and internal policies. - Offer consulting to optimize the use of compliance tools and processes. - Generate budget recommendations to enhance compliance initiatives. - Manage multiple compliance products while keeping in-depth knowledge of Starbucks and industry standards. - Employ LEAN and user-centered design to enhance compliance processes and partner experiences. - Administer and support GRC tools and integration efforts. - Produce and maintain documentation and deliver training on compliance tools and governance practices. - Conduct control assessments and prepare for audits by collecting and validating evidence. - Perform root-cause analysis and lead lasting remediation through control improvements and process adjustments. - Report on remediation status and exceptions in collaboration with stakeholders.