Seattle, WA

Cybersecurity Jobs in Seattle, WA

2 jobs found

Include remote jobs

Today

cybersecurity analyst senior, compliance

Starbucks Seattle, WA

Seattle, WA

Today

$121k - $201k/yr Full time Cardholder Data Cybersecurity Tools Data Flow Security

Apply Now

Job Description

The role at Starbucks is a senior level cybersecurity analyst focused on compliance, based onsite in Seattle, Washington. The position acts as the PCI DSS v4.0 subject matter expert, guiding scoping, segmentation, data-flow validation, encryption design, and the CHD lifecycle while leading compliance program operations and automation with engineering and GRC teams.

Location

Seattle, WA (onsite)

Compensation

Annual salary range: USD 120,800 to 201,300

Responsibilities

Lead PCI architecture assessments with emphasis on segmentation, network flows, and interactions involving cardholder data
Provide expertise on encryption for data at rest and in transit, tokenization, and key management
Steer PCI scoping efforts, validate data flows via data flow diagrams, and manage the cardholder data lifecycle
Identify opportunities to minimize or eliminate cardholder data storage to shrink PCI scope
Translate PCI DSS requirements into concrete technical controls
Support PCI assessments with QSA-facing activities, including evidence validation, control testing, and remediation planning
Design and maintain risk and control matrices aligned to PCI and enterprise standards
Track remediation actions, risk acceptance, and exceptions with stakeholders
Provide guidance on the use of compliance and risk management tools and processes
Develop documentation and training materials for compliance processes and tooling
Advance automation of PCI control validation and evidence collection
Configure GRC/IRM platforms to support testing, assessments, and reporting
Enable continuous monitoring through integrations, APIs, and data models
Develop metrics and dashboards to monitor control health and risk visibility
Gather and analyze solution requirements, facilitate user story creation, and conduct backlog grooming in an agile delivery environment
Apply agile delivery methodologies and participate on scrum teams to drive project outcomes
Assess opportunities for productivity improvements, efficiency gains, and cost savings
Collaborate with engineering teams to embed PCI requirements into system designs
Provide guidance aligned with policies, standards, and risk reduction efforts
Develop reusable templates, documentation, and training materials
Support delivery of compliance capabilities and program metrics, including KPIs
Operate with minimal direction, escalating to senior analysts when necessary

Requirements

Bachelor's degree in computer science or related field, or 3+ years of relevant experience
Apply knowledge of business principles and technology practices to achieve cross-functional outcomes
Excellent analytical and problem-solving skills
Ability to align systems effectively with business needs
Generate comprehensive system documentation
Strong oral and written communication and interpersonal skills
Proficiency with Microsoft Office applications, including Word and Excel
Deep understanding of business processes and process improvement initiatives
Commitment to delivering high-quality customer service
Ability to implement system development concepts effectively
Working knowledge of the systems development lifecycle and IT operations
Use business knowledge, judgment, and resourcefulness to design reliable and sustainable technology solutions
Ability to balance multiple priorities and meet deadlines
Configuration knowledge of relevant applications, modules, and platforms
3+ years of progressive experience in Information Risk Management, IT Governance, IT Compliance, Data Privacy, or Internal/External Technology Audit, with at least two years in IT or software development
Experience in cybersecurity, network security, or cloud security with direct exposure to PCI DSS environments
Strong understanding of network architecture, cloud security design, and encryption protocols
Experience translating compliance requirements into technical solutions
Direct experience supporting PCI DSS assessments (QSA-facing)
Experience designing or validating CDE segmentation in cloud and hybrid environments
Familiarity with payment ecosystems, processors, and tokenization
Exposure to Common Control Framework practices with tracking across multiple standards
Able to influence both technical and business stakeholders in complex settings
Certifications such as PCI QSA/ISA, PCIP, CISA, CISSP, CISM, CIPM or related controls assurance focus are a strong plus
Hands-on experience developing roadmaps, user stories, backlogs, and coordinating conflicting requirements in a fast-paced environment
Experience in engineering or platform roles for GRC or cybersecurity risk management solutions

Technologies

GRC/IRM platforms
APIs
Microsoft Office suite (Word, Excel)

Benefits

Health insurance covering medical, dental, and vision
Life insurance with basic and supplemental options
Disability coverage (short-term and long-term)
Paid parental leave
Family expansion reimbursement
Paid vacation and sick time accrued
Eight paid holidays plus two personal days per year
401(k) retirement plan with employer match
Discounted company stock program (S.I.P.) and Starbucks equity program (Bean Stock)
Emergency savings incentives and financial wellbeing tools
100 percent upfront tuition coverage for a first-time bachelor’s degree via Arizona State University online program under the Starbucks College Achievement Plan
Student loan management resources and access to additional educational opportunities
Backup care and DACA reimbursement
Compliance with applicable state and local laws regarding employee leave benefits

View full job page →

Today

Director cybersecurity, portfolio management

Starbucks Seattle, WA

Seattle, WA

Today

$206k - $343k/yr Full time Enterprise Risk Information Security Management

Apply Now

Job Description

Starbucks offers a senior leadership role in Global Cybersecurity Services, based onsite in Seattle, Washington. The Director of Cybersecurity Portfolio Management leads strategic and operational portfolio management, functioning as an extension of the CISO to align initiatives with enterprise strategy, risk priorities, and regulatory expectations.

Benefits

Medical, dental, and vision insurance
Basic and supplemental life insurance
Short-term and long-term disability
Paid parental leave
Family expansion reimbursement
Paid vacation
Sick time
Eight paid holidays
Two personal days per year
401(k) retirement plan with employer match
Discounted company stock program (S.I.P.)
Starbucks equity program (Bean Stock)
Incentivized emergency savings
Financial well-being tools
100% upfront tuition coverage for a first-time bachelor's degree via Starbucks College Achievement Plan (ASU online)
Student loan management resources
Backup care
DACA reimbursement

Responsibilities

Build and sustain influential relationships at all levels to advance cybersecurity strategy and enterprise risk outcomes.
Serve as a trusted advisor and integrator for the CISO across strategy, execution, and communications.
Partner with senior leadership to identify priority opportunities, align them to enterprise objectives, and drive execution.
Define and communicate cybersecurity strategy, operating model, and execution priorities to internal and external stakeholders.
Collaborate with cross-functional leaders to ensure alignment with Starbucks' business strategy, technology priorities, and risk posture.
Drive execution discipline across the cybersecurity portfolio, ensuring alignment to approved strategies, roadmaps, and commitments.
Establish governance mechanisms, operating rhythms, escalation paths, and decision forums across Global Cybersecurity Services.
Maintain visibility into delivery progress, dependencies, risks, and trade-offs, escalating issues as needed.
Support multi-year planning, prioritization, and sequencing of cybersecurity initiatives across domains and regions.
Ensure consistent measurement and reporting of outcomes, risks, and performance metrics.
Translate cybersecurity strategy and risk priorities into coordinated execution across Identity, Data Protection, Threat Detection & Response, Governance Risk & Compliance, Product Security, and regional teams.
Facilitate governance and compliance to optimize cybersecurity investments and align with enterprise standards.
Identify gaps, overlaps, and execution risks across initiatives and drive resolution.
Lead the synthesis of materials for executive leadership, Audit & Compliance Committee, and Board-level discussions.
Support engagement with Legal, Privacy, Finance, and external auditors as required.
Challenge and inspire partners across Global Cybersecurity Services to achieve enterprise outcomes.
Provide coaching, feedback, and leadership support to the team, senior leaders, and key contributors.
Ensure the team grows in skills, impact, performance management, and career development.
Support leadership capability development, succession planning, and organizational effectiveness.
Promote a culture of accountability, collaboration, and continuous improvement.

Requirements

Thorough familiarity with project management tools, techniques, methodologies, and best practices.
Ability to learn and apply multidisciplinary business principles to drive successful outcomes in cross-functional projects.
Strong capability to tell stories and simplify complex work using analysis and data-backed evidence.
Proven history of developing, leading, and mentoring teams through service delivery and change.
Ability to establish cross-functional, collaborative relationships with business and technology partners.
Strong critical thinking skills with a track record of delivering results.
Exceptional communication and presentation skills, both oral and written.
Bachelor’s degree in Information Security, Computer Science, or a related field and/or 10+ years of cybersecurity experience, with focus areas such as security operations, incident response, or risk management.
Experience in cybersecurity, technology, risk, or enterprise operations.
Experience operating at an executive interface and influencing outcomes without direct authority.
Strong familiarity with cybersecurity frameworks and enterprise risk management practices (eg, NIST CSF, ISO 27001).
Demonstrated executive communication skills, including preparation of Board-level materials.

View full job page →

Cybersecurity Jobs in Seattle, WA

cybersecurity analyst senior, compliance

Director cybersecurity, portfolio management

Get Job Alerts