Analyst, DLP Ruleset and System Administrator - McDonald's Corporation

McDonald’s evolving Accelerating the Arches growth strategy puts our customers and people first, and leverages our competitive advantages to strengthen our brand. We are recognized on lists like Fortune’s Most Admired Companies and Fast Company’s Most Innovative Companies.

Doubling Down on the 4Ds (Delivery, Digital, Drive Thru, and Development)

Our growth pillars emphasize the important role technology plays as the leading, global omni-channel restaurant brand. Technology enables the organization through digital technology, and improving the customer, crew and employee experience each and every day.

Global Technology forging the way

Leading the digitization of our business is the Technology organization made up of intrapreneurs who build industry defining tech using the latest innovations and platforms, like AI and edge computing to deliver on the next set of cutting-edge opportunities for the business. At McDonald’s you get to solve technology innovation challenges at an incredible scale, and work across global teams who are always hungry for a challenge. This provides access to exciting career paths for technologists. It’s bonus points when you get to see your family and friends use the tech you build at their favorite McD restaurant.

The Cybersecurity Data Security team is committed to secure and protect McDonald’s information anywhere, on any device, and at all times. We are seeking the most determined and ambitious cybersecurity professionals to partner with us in continuing to build our culture of security. We strive to find the balance of security with productivity but will never compromise on the quality and effectiveness of our data protection controls. We are looking for tenacious individuals to bring clarity to ambiguous situations by synthesizing and merging it into a plan that will bring quantifiable results towards our goals.

The McDonald’s Cybersecurity Data Security team is growing. We are seeking a Analyst, DLP Ruleset and System Administrator to lead the maintenance and enhancement of the policies, rules, settings, and configurations deployed in the DLP technologies.

Responsibilities:

• Analyzes and interprets DLP use cases and ruleset requirements to design DLP policies, rules, and controls
• Builds test cases and validates DLP policy and rule efficacy prior to production deployment
• Implements DLP policy changes and deployment to production environment
• Refines and improves the implemented DLP policies, rules, and controls by engaging with the Analyst, DLP Event Analysis and Escalation and Manager, DLP Operations to identify tuning opportunities
• Develops and maintains DLP policy documentation, including policy logic details, purpose, exceptions, escalation workflow, and any data needed to recreate policy
• Develops and maintains DLP system documentation, including runbooks and system-wide configurations
• Conducts system health checks to verify servers, agents, and databases are working as expected
• Conducts sophisticated take on and remediation of issues caused by the DLP technologies by engaging with the Help Desk, end users, and the vendors
• Follows DLP change and system management process to implement changes to DLP policies, rules, settings, and configurations
• Supports the execution of DLP integrations with other security technologies

• 2+ years’ experience in areas of DLP and/or data protection
• 2+ years’ experience working with designing, deploying, testing, and tuning security controls
• Experience with leading DLP technologies, such as Microsoft Purview, Proofpoint, or Cisco Umbrella
• Demonstrated competency in developing effective solutions to diverse and complex business problems
• Excellent judgment and the ability to make quick decisions and think creatively when working with complex situations
• Ability to successfully adjust to changing needs in a fast paced, dynamic environment
• Forward thinking and possesses solid intuition for business
• Excellent time management and related organizational skills including appropriate sense of urgency and a proactive approach
• Exhibit a high level of integrity, trustworthiness and confidence, and represents the company and its management team at the highest level of professionalism

Preferred:

• Understand additional data protection capabilities and how those capabilities can be used at a global organization like McDonald’s
• Knowledge and experience with various cybersecurity control frameworks, and standards such as NIST CSF, CIS Controls, SOC II, and security regulations/directives including GPDR, SOX, PCI, and CCPA
• Professional certifications such as CISSP, CISM, CIPP, or similar

McDonald’s is an equal opportunity employer committed to the diversity of our workforce. We promote an inclusive work environment that creates feel-good moments for everyone. McDonald’s provides reasonable accommodations to qualified individuals with disabilities as part of the application or hiring process or to perform the essential functions of their job. If you need assistance accessing or reading this job posting or otherwise feel you need an accommodation during the application or hiring process, please contact mcdhrbenefits@us.mcd.com. Reasonable accommodations will be determined on a case-by-case basis.

McDonald’s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Nothing in this job posting or description should be construed as an offer or guarantee of employment.