information security corrective action, data analyst

$75,300 - $132,900/Yr

Starbucks - Seattle, WA

Part-time,Full-time - Entry Level

Remote - Seattle, WA

Food Services and Drinking Places

About the position

The Information Security Corrective Action Data Analyst at Starbucks plays a crucial role in supporting the risk management processes within the Global Cybersecurity Services (GCS) organization. This position focuses on the Corrective Action program, where the analyst will collect, analyze, and communicate data to help prioritize and manage risks effectively. The role requires a passion for learning, attention to detail, and a commitment to improving existing processes while providing outstanding service.

Responsibilities

• Support risk management processes to identify, triage, manage, report, and drive technology identified corrective actions toward resolution.
• Manage the team's Corrective Action support queue, analyzing risk and escalating issues according to priority and required expertise.
• Gather information and convey accurate and timely status using GRC tools for reporting, data analysis, and troubleshooting.
• Build procedural documentation such as process flows, data flow maps, and standard operating procedures (SOPs) to support the cybersecurity risk program.
• Participate in the scrum team to drive continuous improvement of risk management and corrective action processes.
• Be receptive and responsive to coaching and guidance from leaders and more experienced team members.

Requirements

• 0-2+ years of relevant experience in IT compliance (SOX, PCI, internal controls), IT risk management (NIST, ISO27001), Internal Audit, or Data Privacy fields.
• Ability to apply knowledge of multidisciplinary business principles and practices to support successful outcomes in projects and activities.
• Basic understanding of risk, controls, compliance, and technology governance concepts.
• Ability to use knowledge, sound judgment, and resourcefulness to support the design and deployment of global risk management processes.
• Ability to balance multiple priorities and meet deadlines.
• Strong written and verbal communication skills.

Nice-to-haves

• Certifications such as CISSP, CISA, CIPP, or others focused on information security, data privacy, or information risk management.
• Knowledge of GRC/Cybersecurity Technology (Archer, ServiceNow, Brinqa) is a plus.

Benefits

• 100% tuition coverage through the Starbucks College Achievement Plan.
• Health coverage with a variety of plans to choose from.
• Stock & savings programs like the equity reward program, Bean Stock.
• Flexible scheduling and opportunities for paid time off.