Analyst - Data Classification & DLP Event Analysis

Job Description
Company Description:
McDonald's evolving Accelerating the Arches growth strategy puts our customers and people first, and leverages our competitive advantages to strengthen our brand. We are recognized on lists like Fortune's Most Admired Companies and Fast Company's Most Innovative Companies.
Doubling Down on the 4Ds (Delivery, Digital, Drive Thru, and Development)
Our growth pillars emphasize the important role technology plays as the leading, global omni-channel restaurant brand. Technology enables the organization through digital technology, and improving the customer, crew and employee experience each and every day.
Global Technology forging the way
Leading the digitization of our business is the Technology organization made up of intrapreneurs who build industry defining tech using the latest innovations and platforms, like AI and edge computing to deliver on the next set of cutting-edge opportunities for the business. At McDonald's you get to solve technology innovation challenges at an incredible scale, and work across global teams who are always hungry for a challenge. This provides access to exciting career paths for technologists. It's bonus points when you get to see your family and friends use the tech you build at their favorite McD restaurant.
Check out the Global Technology Technical Blog to learn how technology is directly enabling the Accelerating the Arches strategy.
Job Description:
The Cybersecurity Data Security team is committed to secure and protect McDonald's information anywhere, on any device, and at all times. We are seeking the most determined and ambitious cybersecurity professionals to partner with us in continuing to build our culture of security. We strive to find the balance of security with productivity but will never compromise on the quality and effectiveness of our data protection controls. We are looking for tenacious individuals to bring clarity to ambiguous situations by synthesizing information and merging it into a plan that will bring quantifiable results towards our goals.
The McDonald's Cybersecurity Data Security team is growing. We are seeking a Analyst, Data Classification and DLP Event Analysis to support the deployment of data classification labeling globally and help analyze and facilitate investigation and remediation of DLP events and incidents.
Responsibilities:

• Analyzes and interprets data classification and retention use cases and ruleset requirements to design data classification labels
• Builds test cases and validates data classification label efficacy prior to production deployment
• Implements data classification label changes and deployment to production environment
• Refines and improves the implemented data classification labels by engaging with the Manager, Data Classification and Retention to identify refinement opportunities
• Develops and maintains data classification label policy documentation, including policy logic details, purpose, exceptions, escalation workflow, and any data needed to recreate policy
• Develops and maintains data classification system documentation, including runbooks and system-wide configurations
• Conducts complex troubleshooting and remediation of issues caused by the data classification labels by engaging with the Help Desk, end users, and the vendors
• Follows data classification change and system management process to implement changes to data classification labels and label policies
• Supports the execution of data classification integrations with other security technologies
• Conducts regular review of DLP events generated in the DLP technologies
• Conducts DLP event investigations and provides escalation management (communicates with the Incident Response Team, Business Managers, Human Resources, Compliance, Privacy, and end users, as necessary) throughout the escalation lifecycle
• Helps maintain the DLP Operations Runbook that outlines the standardized processes to be followed for DLP event analysis and escalation
• Identifies DLP ruleset tuning opportunities and communicates the recommendations to the Analyst, DLP Ruleset and System Administrator
• Develops and provides weekly incident reports and recommendations to Manager, DLP Operations
• Conducts basic DLP policy troubleshooting to determine root cause of event generation

Qualifications:

• 2+ years' experience in areas of DLP, data classification, and/or data protection
• 2+ years' experience working with designing, deploying, testing, and tuning security controls
• Experience with leading data classification and DLP technologies, such as Microsoft Purview, Proofpoint, or Cisco Umbrella
• Demonstrated competency in developing effective solutions to diverse and complex business problems
• Program/Portfolio management experience implementing global processes and technology platforms
• Ability to work independently and cross-functionally with strong leadership skills to drive organizational change to effectively meet strategic and tactical goals
• Excellent judgment and the ability to make quick decisions and think creatively when working with complex situations
• Ability to successfully adjust to changing needs in a fast paced, dynamic environment
• Forward thinking and possesses solid business sense
• Excellent time management and related organizational skills including appropriate sense of urgency and a proactive approach
• Exhibit a high level of integrity, trustworthiness and confidence, and represents the company and its management team at the highest level of professionalism

Preferred:

• Willingness to learn and understand additional data protection capabilities and how those capabilities can be used at a global organization like McDonald's
• Knowledge and experience with various cybersecurity control frameworks, and standards such as NIST CSF, CIS Controls, SOC II, and security regulations/directives including GPDR, SOX, PCI, and CCPA
• Professional certifications such as CISSP, CISM, CIPP, or similar
• Familiarity with sophisticated multinational companies and distributed business models

Additional Information:
McDonald's is committed to providing qualified individuals with disabilities reasonable accommodations to perform the essential functions of their jobs. Additionally, if you (or another applicant of whom you are aware) require assistance accessing or reading this job posting or otherwise seek assistance in the application process, please contact [email protected]
McDonald's provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Nothing in this job posting or description should be construed as an offer or guarantee of employment.