senior internal auditor, IT Audit

Starbucks; Seattle (WA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) Retirement Plan with match

Tuition Coverage via Starbucks program

Job summary

Starbucks is seeking a Senior IT Internal Auditor in Seattle to plan and perform audits of technology and data processes, ensuring controls compliance and process improvements.

You will lead end-to-end IT audit activities, assess ITGC and SDLC controls, and collaborate with engineering, security, and external auditors. A strong background in IT risk and SOX is essential for success.

Qualifications

• 3+ years of IT Audit/IT Risk/Technology compliance experience, or 2+ years in IT Audit with a Big-4
• Demonstrated knowledge of internal IT controls, risks, environments, and test procedures
• Ability to independently execute audit tests with high efficiency and quality
• Hands-on ITGC and SOX 404 IT audit experience in a public company or large corporate environment
• Strong communication skills with ability to present audit conclusions to management
• Bachelor’s degree in Accounting, MIS, IS, CS, IT, or related field

Responsibilities

• Lead end-to-end IT audit assessments with test planning, scoping, fieldwork, and reporting
• Conduct walkthroughs, document processes, analyze evidence, and identify deficiencies
• Assess design and operating effectiveness of application, infrastructure, and security controls (on-prem and cloud)
• Evaluate IT risks related to cybersecurity, SDLC controls, data privacy, and third-party risks
• Support SOX 404 IT control testing and liaison with external auditors
• Translate IT risks and deficiencies into clear business language for reports
• Assist with audit reports, closing materials, and project wrap-up
• Follow up on remediation progress and validate details
• Coordinate and communicate engagement status to stakeholders

Skills

IT Audit

IT Risk

SOX IT

Communication

Problem Solving

Documentation

Stakeholder Collaboration

Education

Bachelor's degree in IT/CS/Accounting

Tools

Audit tools

Data analytics tools

AWS/Azure/GCP

Job description

Now Brewing - Senior IT Internal Auditor! #tobeapartner

From the beginning, Starbucks set out to be a different kind of company. One that not only celebrated coffee and the rich tradition, but that also brought a feeling of connection. We are known for developing extraordinary leaders who share this passion and are guided by their service to others.

This job contributes to Starbucks success by planning and performing audits of technology and operational data and processes to verify compliance with established standards and controls, and to identify process improvement opportunities. Models and acts in accordance with Starbucks guiding principles.

A successful senior IT internal auditor at Starbucks is a self-starter, adept at solving problems, and able to collaborate with business stakeholders effectively. You should have strong problem-solving and communication skills, and a solid track record of evaluating technology controls and IT SOX.

As a senior internal auditor, you will…

• With the support of an Audit Project Lead, perform end-to-end IT audit assessments, including test planning, scoping, fieldwork, and reporting
• Independently conduct audit walkthroughs, document business processes and procedures, analyze audit evidence, and identify deficiencies
• Assess the design and operating effectiveness of application, infrastructure, and security controls across complex on-premise and cloud environments
• Evaluate technology risks related to cybersecurity, system implementations, software development lifecycle controls (SDLC), data privacy, and third-party risks
• Support and execute SOX 404 IT control testing, including coordination with external auditors and management, and SOX 302 IT procedures
• Translate, in common English, key internal and external IT risks, deficiencies, and trends
• Support creation of audit reports and closing meeting materials and assist with project wrap-up
• Follow up on issue remediation progress, including validating remediation details
• Coordinate and communicate engagement and initiative status

We'd love to hear from people with:

Basic Qualifications

• 3 years of progressive experience in IT Audit, IT Risk Management, or Technology compliance, or 2 years of IT Audit experience with a Big-4 professional services firm.
• Demonstrated knowledge of internal IT controls, risks, environments, and test procedures
• Ability to independently execute audit tests and evaluations with high efficiency and quality
• Hands-on experience performing IT General Controls and SOX 404 IT audit work in a public company or large corporate environment.
• Ability to communicate clearly and concisely, with experience presenting audit conclusions to management
• Bachelor’s degree in Accounting, Management Information Systems (MIS), Information Systems, Computer Science, Information Technology, or related field

Preferred Qualifications

• Experience in a Big-4 professional services firm, or Internal Audit functions in Fortune 500, large multinational firms with complex technology environments
• Professional certifications (CISA strongly preferred); CISA, ISO 27001 Lead Auditor, CISSP, CISM, CIA
• Previous experience auditing Cloud platforms (AWS, Azure, GCP), SaaS ecosystems, or product-driven tech stacks
• Previous experience auditing cybersecurity controls (network, host, database, cloud layers)
• Proficiency in data analysis tools
• Familiarity with Generative AI techniques to drive efficiencies in audit execution

Required Knowledge, Skills And Abilities

• Ability to perform risk assessments, design and execute risk-based audit programs, evaluate control design and operating effectiveness
• Deep understanding of IT General Controls (ITGC), Application controls, SDLC and change management processes, Information security concepts (IAM, encryption, vulnerability management, networks)
• Familiarity with leading IT frameworks and standards such as NIST 800-53, ISO 27001, SOC 1 / SOC 2
• Experience supporting and coordinating with external auditors
• Strong attention to detail and accuracy while working under tight deadlines
• Comfort interacting with IT Engineering, Cybersecurity teams, Product teams, and External auditors
• Capability to translate technical concepts into clear, business-focused risk discussions

As a Starbucks partner, you (and your family) will have access to medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance benefits. Partners have access to short-term and long-term disability, paid parental leave, family expansion reimbursement, paid vacation from date of hire*, sick time (accrued at 1 hour for every 25 hours worked), eight paid holidays, and two personal days per year. Starbucks also offers eligible partners participation in a 401(k) retirement plan with employer match, a discounted company stock program (S.I.P.), Starbucks equity program (Bean Stock), incentivized emergency savings, and financial well-being tools. Additionally, Starbucks offers 100% upfront tuition coverage for a first-time bachelor's degree through Arizona State University’s online program via the Starbucks College Achievement Plan, student loan management resources, and access to other educational opportunities. You will also have access to backup care and DACA reimbursement. Starbucks will comply with any applicable state and local laws regarding employee leave benefits, including, but not limited to providing time off pursuant to the Colorado Healthy Families and Workplaces Act, and in accordance with its plans and policies. This list is subject to change depending on collective bargaining in locations where partners have a certified bargaining representative. For additional information regarding partner perks and more detailed information about benefits, go to starbucksbenefits.com.

• If you are working in CA, CO, IL, LA, ME, MA, NE, ND or RI, you will accrue vacation up to a maximum of 120 hours (190 in CA) for roles below director and 200 hours (316 in CA) for roles at director or above. For roles in other states, you will be granted vacation time starting at 120 hours annually for roles below director and 200 hours annually for roles director and above.

The actual base pay offered to the successful candidate will be based on multiple factors, including but not limited to job-related knowledge/skills, experience, geographical location, and internal equity. At Starbucks, it is not typical for an individual to be hired at the high end of the range for their role, and compensation decisions are dependent upon the facts and circumstances of each position and candidate.

We believe we do our best work when we're onsite four days a week.

Starbucks Coffee Company is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, or protected veteran status, or any other characteristic protected by law.

Qualified applicants with criminal histories will be considered for employment in a manner consistent with all federal, state and local ordinances.

Starbucks Coffee Company is committed to offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability, please contact us at applicantaccommodation or 1(888) 611-2258.