Now Brewing - Senior IT Internal Auditor! #tobeapartner

This job contributes to Starbucks success by planning and performing audits of technology and operational data and processes to verify compliance with established standards and controls, and to identify process improvement opportunities. Models and acts in accordance with Starbucks guiding principles.

A successful senior IT internal auditor at Starbucks is a self-starter, adept at solving problems, and able to collaborate with business stakeholders effectively. You should have strong problem-solving and communication skills, and a solid track record of evaluating technology controls and IT SOX.

As a senior internal auditor, you will...
- With the support of an Audit Project Lead, perform end-to-end IT audit assessments, including test planning, scoping, fieldwork, and reporting
- Independently conduct audit walkthroughs, document business processes and procedures, analyze audit evidence, and identify deficiencies
- Assess the design and operating effectiveness of application, infrastructure, and security controls across complex on-premise and cloud environments
- Evaluate technology risks related to cybersecurity, system implementations, software development lifecycle controls (SDLC), data privacy, and third-party risks
- Support and execute SOX 404 IT control testing, including coordination with external auditors and management, and SOX 302 IT procedures
- Translate, in common English, key internal and external IT risks, deficiencies, and trends
- Support creation of audit reports and closing meeting materials and assist with project wrap-up
- Follow up on issue remediation progress, including validating remediation details
- Coordinate and communicate engagement and initiative status

We'd love to hear from people with:

Basic Qualifications
- 3 years of progressive experience in IT Audit, IT Risk Management, or Technology compliance, or 2 years of IT Audit experience with a Big-4 professional services firm.
- Demonstrated knowledge of internal IT controls, risks, environments, and test procedures
- Ability to independently execute audit tests and evaluations with high efficiency and quality
- Hands-on experience performing IT General Controls and SOX 404 IT audit work in a public company or large corporate environment.
- Ability to communicate clearly and concisely, with experience presenting audit conclusions to management
- Bachelor's degree in Accounting, Management Information Systems (MIS), Information Systems, Computer Science, Information Technology, or related field

Preferred Qualifications
- Experience in a Big-4 professional services firm, or Internal Audit functions in Fortune 500, large multinational firms with complex technology environments
- Professional certifications (CISA strongly preferred); CISA, ISO 27001 Lead Auditor, CISSP, CISM, CIA
- Previous experience auditing Cloud platforms (AWS, Azure, GCP), SaaS ecosystems, or product-driven tech stacks
- Previous experience auditing cybersecurity controls (network, host, database, cloud layers)
- Proficiency in data analysis tools
- Familiarity with Generative AI techniques to drive efficiencies in audit execution

Required Knowledge, Skills and Abilities
- Ability to perform risk assessments, design and execute risk-based audit programs, evaluate control design and operating effectiveness
- Deep understanding of IT General Controls (ITGC), Application controls, SDLC and change management processes, Information security concepts (IAM, encryption, vulnerability management, networks)
- Familiarity with leading IT frameworks and standards such as NIST 800-53, ISO 27001, SOC 1 / SOC 2
- Experience supporting and coordinating with external auditors
- Strong attention to detail and accuracy while working under tight deadlines
- Comfort interacting with IT Engineering, Cybersecurity teams, Product teams, and External auditors
- Capability to translate technical concepts into clear, business-focused risk discussions

As a Starbucks partner, you (and your family) will have access to medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits. Partners have access to short-term and long-term disability, paid parental leave, family expansion reimbursement, paid vacation from date of hire*, sick time (accrued at 1 hour for every 25 hours worked), eight paid holidays, and two personal days per year. Starbucks also offers eligible partners participation in a 401(k) retirement plan with employer match, a discounted company stock program (S.I.P.), Starbucks equity program (Bean Stock), incentivized emergency savings, and financial well-being tools. Additionally, Starbucks offers 100% upfront tuition coverage for a first-time bachelor's degree through Arizona State University's online program via the Starbucks College Achievement Plan, student loan management resources, and access to other educational opportunities. You will also have access to backup care and DACA reimbursement. Starbucks will comply with any applicable state and local laws regarding employee leave benefits, including, but not limited to providing time off pursuant to the Colorado Healthy Families and Workplaces Act, and in accordance with its plans and policies. This list is subject to change depending on collective bargaining in locations where partners have a certified bargaining representative. For additional information regarding partner perks and more detailed information about benefits, go to starbucksbenefits.com.
*If you are working in CA, CO, IL, LA, ME, MA, NE, ND or RI, you will accrue vacation up to a maximum of 120 hours (190 in CA) for roles below director and 200 hours (316 in CA) for roles at director or above. For roles in other states, you will be granted vacation time starting at 120 hours annually for roles below director and 200 hours annually for roles director and above.

The actual base pay offered to the successful candidate will be based on multiple factors, including but not limited to job-related knowledge/skills, experience, geographical location, and internal equity. At Starbucks, it is not typical for an individual to be hired at the high end of the range for their role, and compensation decisions are dependent upon the facts and circumstances of each position and candidate.

We believe we do our best work when we're together, which is why we're onsite four days a week.

Join us and inspire with every cup. Apply today!