Senior Manager, Data Loss Prevention (DLP) - McDonald's Corporation

McDonald’s evolving Accelerating the Arches growth strategy puts our customers and people first, and leverages our competitive advantages to strengthen our brand. We are recognized on lists like Fortune’s Most Admired Companies and Fast Company’s Most Innovative Companies.

Doubling Down on the 4Ds (Delivery, Digital, Drive Thru, and Development)

Our growth pillars emphasize the important role technology plays as the leading, global omni-channel restaurant brand. Technology enables the organization through digital technology, and improving the customer, crew and employee experience each and every day.

Global Technology forging the way

Leading the digitization of our business is the Technology organization made up of intrapreneurs who build industry defining tech using the latest innovations and platforms, like AI and edge computing to deliver on the next set of cutting-edge opportunities for the business. At McDonald’s you get to solve technology innovation challenges at an incredible scale, and work across global teams who are always hungry for a challenge. This provides access to exciting career paths for technologists. It’s bonus points when you get to see your family and friends use the tech you build at their favorite McD restaurant.

The Cybersecurity Data Security team is committed to secure and protect McDonald’s information anywhere, on any device, and at all times. We are seeking the most determined and ambitious cybersecurity professionals to partner with us in continuing to build our culture of security. We strive to find the balance of security with productivity but will never compromise on the quality and effectiveness of our data protection controls. We are looking for tenacious individuals to bring clarity to ambiguous situations by synthesizing information from multiple sources and merging it into a plan that will bring quantifiable results towards our goals.

The McDonald’s Cybersecurity Data Security team is growing. We are seeking a Sr Manager, Data Loss Prevention to manage the DLP team, program strategy and roadmap, and operations.

Responsibilities:

• Oversees and leads the DLP Operations Team
• Drives the implementation, operationalization, and management of the DLP technologies and program
• Communicates service updates to DLP Working Group
• Reports critical DLP incidents and risks to the People Centric Data Security Director
• Translates the strategic direction and vision of the DLP Working Group into business requirements
• Develops, maintains and completes the DLP services strategy and roadmap
• Develops and maintains the DLP operating model, including staffing/headcount requirements
• Drives and oversees engagement between the DLP team and Business Units
• Oversees DLP change and system management process
• Ensures DLP technology decisions, strategy, goals and initiatives are clearly defined and socialized
• Defines DLP use cases and ruleset requirements and communicates them to the DLP Operations Team
• Ensures DLP rulesets and configurations align with existing or emergent changes in the legal, regulatory and risk landscape
• Sets roadmap and requirements for DLP integrations with other security technologies
• Responds to inquiries from MCD leadership and/or internal and external auditors related to regulatory compliance
• Defines metrics, including key risk and performance indicators, based on DLP use case requirements
• Creates and disseminates DLP reports to the Director, People Centric Data Security and MCD partners

• 8+ years’ experience in areas of DLP and/or data protection
• 4+ years’ experience managing people and leading and running large and globally-dispersed operational teams
• Experience with leading DLP technologies, such as Microsoft Purview, Proofpoint, or Cisco Umbrella
• Demonstrated competency in developing effective solutions to diverse and complex business problems
• Program/Portfolio management experience implementing global processes and technology platforms
• Ability to work independently and cross-functionally with strong leadership skills to drive organizational change to effectively meet strategic and tactical goals
• Excellent judgment and the ability to make quick decisions and think creatively when working with complex situations
• Ability to successfully adjust to changing needs in a fast paced, dynamic environment
• Forward thinking and possesses solid business insight
• Excellent time management and related organizational skills including appropriate sense of urgency and a proactive approach
• Exhibit a high level of integrity, trustworthiness and confidence, and represents the company and its management team at the highest level of professionalism

Preferred:

• Knowledge and experience with various cybersecurity control frameworks, and standards such as NIST CSF, CIS Controls, SOC II, and security regulations/directives including GPDR, SOX, PCI, and CCPA
• Professional certifications such as CISSP, CISM, CIPP, or similar
• Familiarity with sophisticated multinational companies and distributed business models

McDonald’s is an equal opportunity employer committed to the diversity of our workforce. We promote an inclusive work environment that creates feel-good moments for everyone. McDonald’s provides reasonable accommodations to qualified individuals with disabilities as part of the application or hiring process or to perform the essential functions of their job. If you need assistance accessing or reading this job posting or otherwise feel you need an accommodation during the application or hiring process, please contact mcdhrbenefits@us.mcd.com. Reasonable accommodations will be determined on a case-by-case basis.

McDonald’s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Nothing in this job posting or description should be construed as an offer or guarantee of employment.