Job Description

McDonald’s Global Internal Audit department plays a critical role protecting our brand, restaurants, and customers. The Information Technology (“IT”) Sarbanes-Oxley (SOx) Manager is responsible for leading the compliance activities related to technology and application controls for SOx-relevant systems and infrastructure. This includes planning, process documentation, IT control design and effectiveness testing, issue remediation testing, and collaborating with external auditors. Our IT SOX audits focus on McDonald’s markets/entities that are required to comply with various control requirements related to financial statement reporting. In addition to client service activities, the IT SOx Manager will be responsible for evaluating and managing IT risks related to systems and technology that could impact the IT SOx control environment. The manager should have a strong commitment to high-impact assessment results, demonstrating both impactful auditing and the ability to lead others and build out our technical solutions. The IT SOX Manager will work with our Global Internal Audit team members in Chicago, London, Munich, and India.

As part of our leadership team, the manager will also contribute towards achievement of the audit plan, conduct risk assessments, and help improve department processes.

Responsibilities:

• Lead the IT SOx compliance engagements of our technology and digital audit plan, ensuring that they are successfully completed on-time and on-budget.
• Manage and guide the IT SOx audit team in conducting all aspects of our projects including, but not limited to, the development of scope, maintenance of risk and control matrices for in-scope markets, facilitating control design sessions, delivery of completed audit deliverables, handling key communications and project status reporting, and monitoring issue remediation efforts.
• Provide support for IT Control external audit activities.
• Assist in executing annual risk assessment activities for technology, digital, and related areas, and developing the technology and digital audit plan.
• Contribute during periodic leadership meetings on the department’s strategy, processes, and approaches, demonstrating strong security, privacy, and audit domain knowledge.
• Earn trust with leadership by effectively managing sensitive risk and audit discussions, communications, and deliverables.
• Demonstrate thought leadership for current and emerging technology topics including cybersecurity, DevOps, privacy compliance, and data governance.
• Ensure that all team deliverables are of high-quality through high-engagement, detailed oversight, direct involvement, and thought leadership.
• Lead the maintenance and enhancement of our assessment devices, ensuring that they remain secure and enable effective and efficient assessment services.
• Develop, coach, and mentor a high-performing audit team through hiring, oversight, training, and timely and candid performance feedback.

Benefits eligible : Yes
Bonus eligible : Yes
Long term incentive eligible : Yes
The expected salary range for this role is $129,800 - $165,490/ ** __** per year
The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we may also consider your experience, and other job-related factors.

Qualifications

• Bachelor's degree in Engineering, Computer Science, Information Technology, or related field; master’s degree preferred
• 6+ years of related work experience
• Experience with IT SOX controls design and testing
• Experience in delivering and leading information technology audits, financial compliance (Sarbanes-Oxley) audits, program and system implementation reviews, and advisory projects.
• Experience in managing teams, delivering high-quality audit work products, and communicating effectively with various partners (e.g., external/internal audit, senior management, etc.)
• Familiarity with information technology, business processes and financial reporting audits and familiarity with control frameworks such as NIST, COBIT, ITIL, PCI, ISO, SOX, and global data privacy laws (e.g. GDPR, CCPA)
• Strong knowledge across a breadth of IT processes, including but not limited to: security operations, program management, security administration, system operations, change management, modern development (e.g., DevOps, Agile), data governance, privacy, and incident/problem management
• Proven leadership skills and a tendency to lead through influence, lead by example, build relationship, and collaborate.
• Professional credentials preferred (CISA or comparable).

Additional Information

Benefits eligible: This position offers health and welfare benefits, a 401(k) plan, adoption assistance program, educational assistance program, flexible ways of working, and time off policies (including sick leave, parental leave, and vacation/PTO). Eligibility requirements apply to some benefits and may depend on job classification and length of employment.

Bonus eligible: This position is eligible for a bonus, calculated based on individual and company performance.

Long term Incentive eligible: This position is eligible for stock or other equity grants pursuant to McDonald’s long-term incentive plan.

McDonald’s is an equal opportunity employer committed to the diversity of our workforce. We promote an inclusive work environment that creates feel-good moments for everyone. McDonald’s provides reasonable accommodations to qualified individuals with disabilities as part of the application or hiring process or to perform the essential functions of their job. If you need assistance accessing or reading this job posting or otherwise feel you need an accommodation during the application or hiring process, please contact mcdhrbenefits@us.mcd.com. Reasonable accommodations will be determined on a case-by-case basis.

McDonald’s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Nothing in this job posting or description should be construed as an offer or guarantee of employment.