Director, Technology Internal Audit

Job Summary and Mission:

The Director, IT Audit plays a critical leadership role in strengthening Starbucks' technology control environment, technology risk management practices, cybersecurity governance, and resilience. This role provides strategic and operational oversight of IT audit activities, partners closely with technology and business leaders, and delivers objective assurance and advisory services that protect enterprise value and enable responsible technology transformation.

The Director is expected to operate as a trusted advisor on technology risk, balancing independence with strong collaboration across the enterprise.

Summary of

Key Responsibilities:

Leadership & Strategy

• Lead the planning and execution of a risk-based IT audit plan aligned with enterprise technology risks, business priorities, and the broader internal audit plan.
• Manage, coach, and develop IT audit professionals; foster a culture of accountability, continuous improvement, technical excellence, and professional growth.
• Advance the IT audit strategy, methodologies, and use of data analytics, automation, and continuous auditing techniques.

Audit Execution & Oversight

• Oversee technology, cybersecurity, cloud, infrastructure, application, data, third‑party technology, and integrated audits and Sarbanes Oxley (SOX) testing to ensure high‑quality, timely, and actionable results.
• Ensure IT audit work adheres to applicable professional standards (IIA Standards), internal quality guidelines, and recognized technology and cybersecurity control frameworks.
• Review and approve IT audit risk assessments, scopes, work programs, testing approaches, findings, and final reports.

Risk Management & Advisory

• Assess the design and operating effectiveness of technology controls, including cybersecurity, identity and access management, change management, IT operations, data governance, cloud services, business continuity, and disaster recovery.
• Provide proactive advisory support for major system implementations, technology transformations, cloud initiatives, cybersecurity programs, artificial intelligence, and other emerging technologies.
• Identify themes, trends, and systemic technology risks across audit activities and communicate insights to senior leadership.

Stakeholder Management

• Build strong relationships with technology leadership, information security, data and privacy leaders, business unit leaders, compliance, legal, and external auditors.
• Communicate IT audit results clearly and persuasively, translating complex technical risks into business impact, root causes, and practical remediation recommendations.
• Monitor technology-related management action plans and report on remediation progress, residual risk, and risk exposure.

Governance & Reporting

• Support Audit Committee materials and presentations, as applicable.
• Prepare concise, impactful reporting on IT audit results, key technology risks, control issues, and cross‑enterprise themes.
• Maintain independence, objectivity, confidentiality, and appropriate handling of sensitive technology and security information in all audit activities.

Summary of

Experience:

Required

• 10+ years of progressive experience in IT audit, technology risk, cybersecurity, information security, technology consulting, or a related discipline.
• Prior experience leading IT audit teams and managing complex, cross‑functional technology audits.
• Strong knowledge of IT general controls, application controls, cybersecurity, cloud computing, systems development and implementation, data governance, and technology risk assessment methodologies.

Preferred

• Experience in a complex, highly regulated, or publicly traded environment with large‑scale technology operations.
• Demonstrated experience with technology and cybersecurity frameworks,…