Sr Manager, Technical Product Management

McDonald's Corporation•Chicago, IL

50d

About The Position

McDonald’s Global Technology is focused on powering tomorrow’s feel-good moments by exploring new and innovative ways to serve millions of customers. The Sr Manager for SOX Compliance will oversee the management and governance of SOX-related IT applications, specifically focusing on Access Management, Change Management, Segregation of Duties (SOD), and remediation of deficiencies related to GI Mod (Global Indirect Modernization) using SAP Ariba software. This role requires a strong understanding of SOX requirements, IT controls, and audit methodologies, along with the ability to provide strategic recommendations and implement corrective actions to ensure compliance and mitigate risks. GI Mod is a global transformation initiative to establish a new Indirect Sourcing and Procurement operating model and implement a unified approach for indirect sourcing and procurement worldwide. This role reports to the Global Tech Director of Technical Product Management and collaborates closely with cross-functional leaders to ensure SOX compliance on the SAP Ariba software.

Requirements

Minimum of 8 years of experience in IT audit, SOX compliance, or a related field, with at least 2 years in a managerial role
Strong knowledge of SOX requirements, IT general controls, and audit methodologies.
Experience with SAP Ariba.
Proven ability to plan, execute, and deliver complex programs with measurable business outcomes.
Strong stakeholder management, executive communication and presentation skills.
Demonstrated success leading cross‑functional, multi‑team initiatives.
Executive‑level communication skills with the ability to influence and drive decisions.
Strong organizational skills with the ability to balance strategic thinking and attention to detail.
Proactive, resilient, and adaptable leader with a continuous‑improvement mindset.

Responsibilities

Own SAP Ariba IT SOX compliance strategy and SOX-related IT change management governance, establishing standards, controls, approvals, and metrics while driving disciplined exception management and remediation.
Lead all aspects of SAP Ariba application security in alignment with SOX compliance strategy.
Partner with Global Security to translate cybersecurity policies into actionable control requirements, drive consistent implementation across platforms, and resolve control gaps through executive stakeholder alignment.
Be responsible for the vulnerability management program for SOX on the SAP Ariba application, setting prioritization criteria, driving platform roadmaps, and reporting risk / remediation progress to senior leadership.
Establish and supervised risk-based user access review governance for SOX on SAP Ariba application, ensuring timely completion, quality of evidence, and closure of findings through accountable action plans.
Lead intake, triage, and risk assessment of IT control deficiencies identified by internal/external audit, maintaining a prioritized remediation portfolio and facilitating risk acceptance decisions when appropriate.
Serve as the senior liaison for SOX-related audits, setting audit engagement strategy, coordinating walkthroughs and evidence, and ensuring consistent messaging and outcomes across stakeholder groups.
Modernize and optimize the structuring of IT governance controls through standardization and automation, improving control effectiveness, auditability, and operational efficiency across the SOX compliance lifecycle.
Build SOX and controls capability across technology teams through targeted training, playbooks, and coaching; embed control ownership into delivery practices and leadership routines.
Deliver executive-ready reporting on audit results, trends, and remediation health; present findings and recommendations to the organization's top management and governance committees as required.
Define and drive the multi-year IT SOX strategy roadmap (e.g., access management, change management, evidence automation), aligning priorities, funding needs, and outcomes with Senior Leadership.
Provide oversight and advisory support on privacy and regulatory requirements (e.g., GDPR, PII), ensuring integration into IT control design, risk assessments, and audit responses for in-scope systems and processes.