Job Description
Company Description:
McDonald's is proud to be one of the most recognized brands in the world, with restaurants in over 100 countries that serve 70 million customers daily. As the global leader in the food service industry, our legacy of innovation and hard work continues to drive us.
From drive thru updates to delivery to mobile order and pay, we are innovating quickly and growing. Joining McDonald's means thinking big and preparing for a career that can have influence around the world.
At McDonald's, we see every day as a chance to create positive impact. We lead through our values centered on inclusivity, service, integrity, community and family. From support of Ronald McDonald House Charities to our Youth Opportunity project and sustainability initiatives, our values keep us dedicated to using our scale for good: good for our customers, people, industry and planet. We also offer a broad range of outstanding benefits including a sabbatical program, tuition assistance and flexible work arrangements - check them out here !
While most of us are working remote during COVID-19, we're excited to get back to our state-of-the-art headquarters in the booming West Loop of downtown Chicago! It's set up to be a global hub that cultivates collaboration:

• Take a class at Hamburger University
• Sample future items in our Test Kitchen
• Utilize the latest technology to connect with your team around the globe

We are an equal opportunity employer committed to the diversity of our crew members, staff, operators, and suppliers. We promote an inclusive work environment that creates feel-good moments for everyone. We are interested in people who enhance our company culture: Does this role interest you? We encourage you to apply even if you don't meet every single requirement!
Job Description:
The Cybersecurity Data Protection team is committed to secure and protect McDonald's information anywhere, on any device, and at all times. We are seeking the most determined and ambitious cybersecurity professionals to partner with us in continuing to build our culture of security. We strive to find the balance of security with productivity but will never compromise on the quality and effectiveness of our data protection controls. We are looking for tenacious individuals to bring clarity to ambiguous situations by synthesizing information from different sources and merging it into a plan that will bring quantifiable results towards our goals.
The McDonald's Cybersecurity Data Protection team is growing. We are seeking a Manager, DSPM to manage the data security posture management roadmap and operations.
Responsibilities:

• Collaborates with the Cloud Security Controls service regarding data protection policies and remediation priority
• Blocking issue point for Cloud Security Controls service for major application data risks, issues, and/or concerns
• Provides approvals (as needed) to support effective operations
• Collaborates with technology owners to communicate cloud data controls policy and remediation needs
• Collaborates with Cloud Security Controls Working Group to provide insights on cloud security operations (i.e., DSPM / CSPM controls, native cloud security controls)
• Assists with Cloud Security Controls change and system management processes as it applies to Data Protection
• Collaborates with Application Data Director for reporting on Cloud Security Controls operations for Data Protection

Qualifications:

• 4+ years' experience in areas of IT and/or cybersecurity
• 2+ years' experience completing enterprise-wide data protection strategies such as encryption, data discovery, or DSPM policy management
• Demonstrated competency in developing effective solutions to diverse and complex business problems
• Program/Portfolio management experience implementing global processes and technology platforms
• Ability to work independently and multi-functionally with strong leadership skills to drive organizational change to effectively meet strategic and tactical goals
• Excellent judgment and the ability to make quick decisions and think creatively when working with complex situations
• Ability to successfully adjust to changing needs in a fast paced, dynamic environment
• Forward thinking and possesses solid discernment
• Excellent time management and related organizational skills including appropriate sense of urgency and a proactive approach
• Exhibit a high level of integrity, trustworthiness and confidence, and represents the company and its management team at the highest level of professionalism
• Experience with Wiz, DataDog, or similar and native CSC management platforms

Preferred:

• Knowledge and experience with various cybersecurity control frameworks, and standards such as NIST CSF, CIS Controls, SOC II, and security regulations/directives including GPDR, SOX, PCI, CCPA, etc
• Professional certifications such as CISSP, CISM, or similar.
• Familiarity with sophisticated multinational companies and distributed business models.

Additional Information:
McDonald's is committed to providing qualified individuals with reasonable accommodations to perform the essential functions of their jobs. Additionally, if you (or another applicant of whom you are aware) require assistance accessing or reading this job posting or otherwise seek assistance in the application process, please contact [email protected]
McDonald's provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Nothing in this job posting or description should be construed as an offer or guarantee of employment.