director, Privacy

About the role

The Director, Privacy will lead a global team of privacy and records‑management professionals on operational and program‑management matters related to privacy, cybersecurity, AI governance, national security, records management, and data governance. Reporting to the Director, Managing Corporate Counsel, Privacy, the role executes strategy, develops the team, and partners with senior executives and in‑house counsel to manage significant risks and address complex privacy and operational issues across the organization.

Responsibilities

• Lead a global team of privacy and records‑management professionals.
• Execute the strategy for privacy, cybersecurity, AI governance, national security, records management, and data governance.
• Proactively engage with and advise senior executives and in‑house counsel on privacy‑related risks.
• Identify, anticipate, and manage highly complex privacy and operational issues.
• Manage the comprehensive Starbucks global privacy operations program to ensure compliance with applicable laws and regulations.
• Serve as a trusted advisor on privacy, cybersecurity and incident response, national security, artificial intelligence, emerging technologies (including digital platforms and ad technology), information records management, and data governance.
• Support the design and development of privacy‑compliant technologies and platforms using privacy‑by‑design methodologies.
• Manage privacy platforms in coordination with vendors.
• Provide leadership on privacy operations, including impact assessments, data mapping, processing records, classification, retention, data‑subject access requests, and cross‑border data transfers.
• Assist counsel with regulatory inquiries and audits and build relationships with regulators.
• Partner closely with cybersecurity teams to align on programs, vendor agreements, incident response, and tabletop exercises/simulations.
• Develop enterprise‑wide policies and training on privacy, cybersecurity, data governance, national security, and responsible AI governance.
• Participate in data‑use review and AI governance committees.
• Advise senior executives on emerging developments to inform actionable policy and operational adjustments.
• Embody and foster Starbucks’ culture and values.

Requirements

• Minimum of 10 years of relevant privacy experience.
• Industry certifications such as CIPP/US, CIPM, CIPT, FIP, and/or AIGP.
• Expertise managing privacy operations and building privacy programs aligned with U.S. state and federal laws (e.g., CCPA/CPRA, CIPA, VPPA, PADFAA, Data Security Program) and international privacy regulations.
• Experience with privacy‑by‑design and digital platform development, including risk mitigation advising for technology and engineering teams.
• Demonstrated ability to build strong relationships with attorneys, program directors, managers, paralegals, analysts, legal support partners, and business and engineering stakeholders.

Benefits

• Medical, dental, vision, basic and supplemental life insurance, and other voluntary insurance options.
• Short‑term and long‑term disability coverage.
• Paid parental leave and family‑expansion reimbursement.
• Paid vacation from date of hire (accrual varies by state and role level).
• Sick time accrued at 1 hour per 25 hours worked.
• Eight paid holidays and two personal days per year.
• 401(k) retirement plan with employer match.
• Discounted company stock program (S.I.P.) and Starbucks equity program (Bean Stock).
• Incentivized emergency savings and financial‑wellness tools.
• 100% tuition coverage for a first‑time bachelor’s degree through Arizona State University’s online program (Starbucks College Achievement Plan).
• Student loan management resources and additional educational opportunities.
• Backup care and DACA reimbursement.

Pay

The base pay for this position will be determined based on factors such as job‑related knowledge, skills, experience, geographical location, and internal equity. Compensation decisions are made on a case‑by‑case basis and are not typically at the high end of the range for the role.

Schedule

This role requires onsite work four (4) days per week.