McDonald's · 2 months ago
Risk Analyst, Governance, Risk & Compliance
McDonald's is one of the most recognized brands globally, serving millions daily. They are seeking a Risk Analyst to support their cybersecurity team by collaborating with experts and business leaders to assess technology risks and enhance the risk management program.
Restaurants
Responsibilities
Maintain a working knowledge of current industry risk and trends as well as clear understanding of McDonalds’ business and technical strategies in order to be accountable for identifying security risks and concerns
Perform complex application/infrastructure/solution security risk assessments to identify security risks and control gaps that put McDonald’s at risk
Communicate and prioritize security risks across the business and validate remediation efforts and timelines
Partner with relevant stakeholders to drive implementation of appropriate security controls and risk mitigation strategies to comply with McDonald’s policies and standards
Support management of the intake queue for new risk assessments and non-compliace requests across the organization
Implement the mapping and reporting of risks and control objectives against industry frameworks to effectively highlight opportunities
Improve metrics and identify trends for risk management activities and drive visibility and transparency of business value for completed work
Advise and influence global technology and business management regarding security best practices, risk analysis, risk mitigation and reporting
Create process documentation, including workflows, process maps, and controls
Qualification
Required
Applicable bachelor's degree or equivalent work experience (1-3 years) within Risk Management, Governance Risk and Compliance, Internal Audit, Third Party Risk Management, Compliance, Cybersecurity, or other related fields
Excellent written & verbal communication
Ability to build and maintain professional relationships across the organization
Detail-oriented with strong project and time management, report writing and presentation skills
Ability to translate messaging between technical teams and business stakeholders
Process enhancements and the desire to improve excites you
Eagerness to join the ranks of a high performing team
Preferred
Familiarity with complex multinational companies and distributed business models
Strong ability to develop and communicate strategic direction and long-term objectives without supervision
Experience with Information/Technology Risk Management, Supply Chain Risk Management, Third Party Risk Management, and/or Global Regulatory Compliance
Proficient in technical writing and demonstrating various creative mechanisms to communicate to diverse audiences
Strong ability to assess urgency and prioritization and make good decisions based upon business or market requirements
Demonstrable ability to quickly identify project objectives and define optimal project approach to align security controls with overall program success
Understanding of key compliance, risk, and control frameworks such as NIST, PCI, ISO, COBIT, CIS etc
Experience of GRC platforms (e.g. ServiceNow, OneTrust, RSA Archer)
Professional certifications, or eagerness to obtain one, such as Security+, CIA, CISA, CISM, CRISC, CISSP, and PMP
Benefits
Health and welfare benefits
401(k) plan
Adoption assistance program
Educational assistance program
Flexible ways of working
Time off policies (including sick leave, parental leave, and vacation/PTO)
Company
McDonald's
McDonald’s is the world’s leading global foodservice retailer with over 37,000 locations in over 100 countries.
H1B Sponsorship
McDonald's has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (61)
2024 (77)
2023 (37)
2022 (31)
2021 (60)
2020 (12)
Funding
Current Stage
Late StageRecent News
2025-10-07
The Motley Fool
2025-10-07
Company data provided by crunchbase