Senior Manager - Data Classification & Retention - McDonald's Corporation

McDonald’s evolving Accelerating the Arches growth strategy puts our customers and people first, and leverages our competitive advantages to strengthen our brand.  We are recognized on lists like Fortune’s Most Admired Companies and Fast Company’s Most Innovative Companies.

Doubling Down on the 4Ds (Delivery, Digital, Drive Thru, and Development)
Our growth pillars emphasize the important role technology plays as the leading, global omni-channel restaurant brand. Technology enables the organization through digital technology, and improving the customer, crew and employee experience each and every day.

Global Technology forging the way
Leading the digitization of our business is the Technology organization made up of intrapreneurs who build industry defining tech using the latest innovations and platforms, like AI and edge computing to deliver on the next set of cutting-edge opportunities for the business.  At McDonald’s you get to solve technology innovation challenges at an incredible scale, and work across global teams who are always hungry for a challenge. This provides access to exciting career paths for technologists. It’s bonus points when you get to see your family and friends use the tech you build at their favorite McD restaurant.

Check out the Global Technology Technical Blog to learn how technology is directly enabling the Accelerating the Arches strategy.

The Cybersecurity Data Security team is committed to secure and protect McDonald’s information anywhere, on any device, and at all times. We are seeking the most determined and ambitious cybersecurity professionals to partner with us in continuing to build our culture of security. We strive to find the balance of security with productivity but will never compromise on the quality and effectiveness of our data protection controls. We are looking for tenacious individuals to bring clarity to ambiguous situations by synthesizing information and merging it into a plan that will bring quantifiable results towards our goals.

The McDonald’s Cybersecurity Data Security team is growing. We are seeking a Senior Manager, Data Classification and Retention to manage the deployment of data classification labeling globally and define and implement a strategy for proper data retention, deletion, and destruction.

Responsibilities:

• Oversees and leads the Data Classification and Retention Operations Team
• Drives the implementation, operationalization, and management of the data classification labels
• Compiles and drives the strategy for end users and application owners to comply with the data retention schedule and to properly delete and destroy data
• Develops, maintains and drives the data classification and retention services strategy and roadmap
• Develops and maintains the data classification and retention operating model, including staffing/headcount requirements
• Drives and oversees engagement between the data classification team and Business Units
• Oversees data classification and retention change and system management process
• Ensures data classification and retention technology decisions, strategy, goals and initiatives are clearly defined and socialized
• Defines data classification and retention use cases and ruleset requirements and communicates them to the Data Classification and Retention Operations Team
• Ensures data classification label configurations align with existing or emergent changes in the legal, regulatory and risk landscape
• Sets roadmap and requirements for data classification label integrations with other security technologies
• Responds to inquiries from MCD leadership and/or internal and external auditors related to regulatory compliance
• Defines metrics, including key risk and performance indicators, based on data classification and retention use case requirements
• Creates and disseminates data classification and retention reports to the Director, People Centric Data Security and MCD partners

• 8+ years’ experience in data protection and/or with deploying and managing data classification or retention capabilities and programs
• 4+ years’ experience managing people and leading operational teams
• Experience with data classification and information rights management technologies, such as Microsoft Information Protection
• Experience defining a data retention framework
• Demonstrated competency in developing effective solutions to diverse and complex business problems
• Program/Portfolio management experience implementing global processes and technology platforms
• Ability to work independently and cross-functionally with strong leadership skills to drive organizational change to effectively meet strategic and tactical goals
• Excellent judgment and the ability to make quick decisions and think creatively when working with complex situations
• Ability to successfully adjust to changing needs in a fast paced, dynamic environment
• Forward thinking and possesses solid business insight
• Excellent time management and related organizational skills including appropriate sense of urgency and a proactive approach
• Exhibit a high level of integrity, trustworthiness and confidence, and represents the company and its management team at the highest level of professionalism

Preferred:

• Knowledge and experience with various cybersecurity control frameworks, and standards such as NIST CSF, CIS Controls, SOC II, and security regulations/directives including GPDR, SOX, PCI, and CCPA
• Professional certifications such as CISSP, CISM, CIPP, or similar
• Familiarity with sophisticated multinational companies and distributed business models

McDonald’s is committed to providing qualified individuals with disabilities reasonable accommodations to perform the essential functions of their jobs. Additionally, if you (or another applicant of whom you are aware) require assistance accessing or reading this job posting or otherwise seek assistance in the application process, please contact recruiting.supportteam@us.mcd.com

McDonald’s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Nothing in this job posting or description should be construed as an offer or guarantee of employment.