McDonald's Corporation is looking for a Governance, Risk & Compliance Specialist to join our cybersecurity team. In this specialist role, you will focus on identifying security risks, conducting third-party assessments, and advising technology and business leaders on risk mitigation strategies that align with our global business strategies.
What You'll Do
- Maintain a deep understanding of industry risk trends and McDonald's business strategies to identify security risks.
- Conduct comprehensive third-party security risk assessments to uncover potential vulnerabilities.
- Communicate and prioritize security risks across the organization; validate remediation efforts and timelines.
- Partner with stakeholders to implement security controls and risk mitigation strategies aligned with McDonald's policies.
- Manage intake and prioritization of new risk assessments across the enterprise.
- Map and report risks against industry frameworks (e.g., NIST, ISO) to highlight opportunities for improvement.
- Develop metrics, identify trends, and drive visibility into the business value of risk management activities.
- Advise global technology and business leaders on security best practices, risk analysis, and mitigation strategies.
- Create and maintain process documentation, including workflows, process maps, and controls.
What We're Looking For
- Bachelor’s Degree in Risk Management, GRC, Internal Audit, Third-Party Risk Management, Compliance, Cybersecurity, or related fields.
- 1-3 years of experience in Information/Technology Risk Management, Supply Chain Risk Management, Third-Party Risk Management, and/or Global Regulatory Compliance.
- Strong written and verbal communication skills, with proficiency in technical writing for diverse audiences.
- Ability to build and maintain professional relationships across diverse teams.
- Detail-oriented with excellent project management, report writing, and presentation skills.
- Skilled at translating technical concepts for business stakeholders.
- Passion for process improvement and continuous enhancement.
- Familiarity with multinational organizations and distributed business models.
- Understanding of compliance, risk, and control frameworks (e.g., NIST, PCI, ISO, COBIT, CIS).
- Experience with GRC platforms (e.g., ServiceNow, OneTrust, RSA Archer).
- Ability to prioritize effectively and make sound decisions based on business needs.
Nice to Have
- Professional certifications (or willingness to obtain): Security+, CIA, CISA, CISM, CRISC, CISSP, PMP.
Technical Stack
- ServiceNow
- OneTrust
- RSA Archer
Benefits & Compensation
- Annual compensation range: $84,051.00 - $105,064.00
- Health and welfare benefits
- 401(k) plan
- Adoption assistance program
- Educational and tuition assistance programs
- Flexible ways of working and work arrangements
- Time off policies (including sick leave, parental leave, and vacation/PTO)
- Sabbatical program
McDonald’s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, race, color, religion, age, disability status, and other protected characteristics.
