Description

Duties

Do you have a passion for Technology? We have an outstanding opportunity for a hardworking standout colleague to join our Technology & Digital team within the Global Internal Audit function! We are pursuing major IT and digital initiatives that include new brand engagement, e-commerce, service delivery, cybersecurity, privacy, cloud migrations, and digital content capabilities. We are seeking passionate team members who want to thrive in this complex environment!

Responsibilities:

• Perform risk-based data driven audits related to various areas including data privacy, data protection, cloud infrastructure, network security, secure coding, mobile and web applications, and Internet of Things (IoT).
• Develop control matrices and successfully drive audits on-time and on-budget.
• Guide and assist the Technology & Digital Audit team in conducting multiple concurrent technology audits and leading the delivery of audit engagements.
• Support financial transformation initiatives within McDonald’s, driving process improvements, and optimizing financial operations. Collaborate with cross-functional teams to drive transformation initiatives and streamline financial operations.
• Leverage interpersonal skills to translate complex technical issues or concepts to non-technical audiences in a clear and concise manner that focuses on business value.
• Work with IT leadership on technology and digital strategies, privacy and related regulations, customer loyalty program, and cybersecurity. Partner with management to improve effective identify risks and improve the control environment.
• Collaborate with internal audit functional leads for analytics, technology and finance/operations to form integrated approaches.
• Perform outreach and maintain collaborative working relationships with partners across product, engineering, security, corporate technology, finance systems and business systems.
• Develop and execute risk-based IT and cybersecurity audit plans, including scoping, testing, and reporting of various security domains, including vulnerability management, access control, incident response, data security, and cloud security.
• Demonstrate knowledge of current and emerging technology topics including cybersecurity, DevOps, privacy compliance, and data governance.
• Participate in risk assessments to identify and measure key risks throughout the organization.
• Assist in data analytics conceptualization, design, and development of projects.
• Communicate progress of projects to IT Audit Director/Manager on a timely basis.
• Work with fellow auditors to navigate through planning activities and utilization of departmental tools.
• Share knowledge, deliver training, mentorship, coaching and support to IT Audit staff.

Requirements

Qualifications

• 2+ years of previous audit-related work experience, such as delivering and/or leading technology focused audits, data driven assessments, cybersecurity audits, program and system implementation reviews and advisory projects.
• Previous experience leading all aspects of audit work and communicating effectively with various partners (e.g., external/internal audit, senior management, etc.) is highly preferred.
• Bachelor's degree in Engineering, Computer Science, Information Technology, or Business is highly preferred, but not required.
• Ability to travel (both domestically and internationally).
• Excellent analytical, problem-solving, and critical thinking skills.
• Highly proficient in writing reports and including presentation to senior management and leaders.
• Strong communication skills, both written and verbal, with the ability to effectively communicate audit findings and recommendations to diverse audiences.
• Ability to work independently and collaboratively in a team environment.
• Attention to detail, high ethical standards, and a commitment to maintaining confidentiality.
• Understanding Windows/Active Directory/Linux systems administration and vulnerabilities.
• Experience with programming (Python, Powershell, Go, C, C++, C#, Javascript, etc.), scripting, data analytics, and other technical solution design and development.
• Knowledge across a breadth of IT processes, including but not limited to: security operations, program management, security administration, system operations, change management, modern development (e.g., DevOps, Agile), data governance, privacy, and incident/problem management.
• Professional credentials such as CISA, CISSP, CEH, CIPT, CDPSE or other relevant certifications are preferred.
• Familiarity with information technology, business processes and financial reporting audits and familiarity with control frameworks such as NIST, COBIT, ITIL, PCI, ISO and global data privacy laws (e.g., GDPR, CCPA).