Manager, Cybersecurity

McDonald's Corporation•Chicago, IL

2d•$138,207 - $172,758

About The Position

McDonald’s, one of the most recognized brands in the world, is seeking a Manager, Cybersecurity to join our Immediate Risk Reduction (IRR) team, which supports Global Cyber Security (GCS) in protecting McDonald’s. IRR is a series of programs that address areas of basic hygiene, critical and high security exploits, and short-term key efforts that tangibly reduce security risks to McDonald’s across the system. IRR stands in the gap between exposed vulnerabilities and risks that lead to incidents. Reporting to the GCS Director, Cybersecurity, this role will be responsible for supporting the IRR strategy, improving solutions for centralized remediation tracking, & relentlessly prioritizing efforts across the entire program. You will collaborate closely with and lead cross-functional teams across Global Technology leadership, market leaders, application owners, project managers, Global Technology solutions teams, key vendors, and others to identify, prioritize, mitigate and resolve our most pressing cybersecurity risks. Due to the nature of our global business, this role will often require supporting emergent events outside of normal business hours. This role is expected to evolve into a people management position. While there are no direct reports initially, the individual will assume leadership responsibilities and manage a team within approximately 6–12 months.

Requirements

Bachelor’s degree in engineering, information technology, cybersecurity or other related fields.
2-4 years of experience in cybersecurity, technical project management, IT management, or related field.
Strong understanding of cybersecurity principles, practices, and technologies.
Strong organizational skills and the ability to prioritize work within and outside the team.
Ability to work under tight deadlines, handling multiple business priorities.
Strong problem-solving and analytical skills to analyze complex cybersecurity issues and devise effective solutions.
Competent in planning and risk management to anticipate and mitigate potential security threats.
Competent in technical writing and demonstrating various creative mechanisms to communicate to diverse audiences.
High level of integrity and professionalism to maintain the trust and confidence of partners.
Experience in implementing cybersecurity measures and protocols to safeguard the organization’s digital assets.
Experience managing 3rd party vendors and service providers.
Excellent written & verbal communication.

Nice To Haves

Familiarity with complex multinational companies and distributed business models.
Experience in automating processes using tools such as
Experience and willingness to work with global teams.
Experience working with Jira, Confluence, and other work management products.
Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification.
Experience working and collaborating with business and IT teams to successfully secure applications, infrastructure and data in a large global organization.

Responsibilities

Ensure security policies, standards, procedures, and guidelines are followed.
Maintain awareness of critical vulnerabilities and emerging threats that may impact McDonald’s.
Focus on developing processes and business relationships for the effective and timely remediation of risk in McDonald’s environment.
Maintain key stakeholder relationships and communications to ensure SLAs are understood and exceptions escalated as required.
Perform functions promptly and with an acute level of attention to detail, urgency, and thoroughness.
Manage assigned IRR programs with a focus on speed, impact and priority.
Schedule work for assigned projects/programs to ensure scope, schedule, and budget are on target.
Review and create documentation, reports, and policies related to IRR programs.
Contribute to continuous improvement efforts in partnership with security practitioners, cross-functional teams, and technology leaders.
Analyze moderately complex issues, determine their cause and impact on the business, and identify the corrective action needed to eliminate and prevent them in the future.
Track OKRs and other metrics to show the health and effectiveness of IRR programs.
Conduct training and awareness for new staff and stakeholders on IRR processes and expectations.
Contribute to the professional development of other team members.