Director, Privacy

Now Brewing – director, Privacy! #tobeapartner

From the beginning, Starbucks set out to be a different kind of company. One that not only celebrates coffee and its rich traditions, but that also brings a feeling of connection. We are known for developing extraordinary leaders who share this passion and are guided by their service to others.

The director, Privacy will lead a global team of privacy and records management professionals on operational and program management matters relating to privacy, cybersecurity, AI governance, national security, records management, and data governance. The role will execute the strategy for the team’s areas of accountability and develop the team to deliver on business objectives with the leadership and legal guidance of the director, Managing Corporate Counsel, Privacy.

This role involves proactively engaging with and advising senior executives and in-house counsel, managing significant risks in a commercially pragmatic manner, identifying and anticipating highly complex privacy/operational issues, and reaching broadly and impactfully across the organization.

• Manage the comprehensive Starbucks global privacy operations program under the guidance of the director, Managing Corporate Counsel to ensure compliance with applicable laws and regulations while protecting brand integrity and consumer trust.
• Serve as a trusted advisor on privacy, cybersecurity and incident response, national security, artificial intelligence, emerging technologies (including digital platforms and ad technology), information records management, and data governance.
• Support the design and development of privacy-compliant technologies and platforms, following privacy-by-design methodologies in compliance with global privacy and data protection laws.
• Manage privacy platforms in coordination with vendors.
• Provide leadership on privacy operations including impact assessments, data mapping, recordings of processing, classification, retention, data subject access requests, and cross-border data transfers.
• Assist counsel with regulatory inquiries and audits and build relationships with regulators.
• Partner closely with cybersecurity teams to align on cybersecurity programs, vendor agreements, incident response, and designing and executing tabletop exercises/simulations.
• Develop enterprise-wide policies and training on privacy, cybersecurity, data governance and national security, and responsible AI governance.
• Participate in data use review and AI governance committees.
• Advise senior executives on emerging developments to inform actionable policy and privacy operational adjustments.
• Embody and foster our culture and values.

• Minimum of 10 years of relevant experience in privacy, including industry certifications such as CIPP/US, CIPM, CIPT, FIP, and/or AIGP.
• Expertise managing privacy operations and building privacy programs aligned with privacy and privacy-adjacent laws and regulations including U.S. state and federal laws (e.g., CCPA/CPRA and other U.S. states, CIPA, VPPA, PADFAA, Data Security Program) and international laws and regulations.
• Expertise in privacy-by design and digital platform development, including advising on risk mitigation with demonstrated expertise in working with technology and engineering teams.
• Demonstrated experience building strong relationships with attorneys, program directors, program managers, paralegals, analysts, legal support partners, and business and engineering partners.

As a Starbucks partner, you (and your family) will have access to medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits. Partners have access to short-term and long-term disability,…