IT Security Service Manager

McDonald’s is the world’s leading global foodservice retailer with over 36,000 locations in over 100 countries. More than 80% of McDonald’s restaurants worldwide are owned and operated by independent local business men and women.

IT Solutions is the central IT organization to McDonald’s and is made up of global and regional components. Global Technology Risk Management (GTRM) is the team which is ultimately responsible for the securing of McDonald’s information assets at a global level. Within GTRM, the Global Identity and Access (GIA) team is responsible for managing how user ID’s are issued and managed globally. The “customer” or stakeholder for a GTRM service or solution could be a technical service manager, a peer group in IT Solutions, or any consumer of IT services in the greater McDonald’s enterprise including the markets which can and do consume technology with local decision power.

* This Sr. Security Engineer is responsible for managing and enhancing McDonald’s single sign-on infrastructure, which is used internally by over 200 applications and over half a million people. This infrastructure is based on SAML. * This person will also be responsible for McDonald’s global customer authentication, which is used by some of McDonald’s 70 million daily customers to access various web applications and mobile apps around the world. * The Sr. Security Engineer will be responsible for managing the external vendor that is responsible for operating McDonald’s single sign-on infrastructure and will leverage the personnel and resources of their team to deliver services that are essential to the operations and security of business applications. This infrastructure must be available 24X7. * This person will understand and help influence the high level strategy and direction of leadership and lead the team in the execution of projects and daily activities as well as set clear expectations, goals, and requirements that must be obtained as a measure of success. This person will work closely with the other Global Identity and Access service managers and security engineers to ensure the solutions provided to customers are performing to expectation. * Manage strategic vendor partnerships with a focus on delivering efficient and secure solutions in a timely manner and with an extreme level of attention to urgency and thoroughness. * Apply an understanding of digital commerce to identify and introduce necessary technical controls to protect consumer data, the integrity of systems, and prevent current fraud/abuse trends while providing an engaging and convenient customer experience. * Drive strategic design, implementation, and support deployment processes as well as proactively develop and implement regular improvements. * Lead the adoption of the identity and access strategy through the documentation of a transparent business capability roadmap that is developed through close relationships with key business partners. * Be a creative solution provider with the ability to translate customer/business needs into technical solutions. * Occasionally represent the organization to senior leadership through briefings reports, planning sessions and other personal interactions. * Manage McDonald’s single sign on solutions for web and mobile. * Manage McDonald’s customer authentication solutions. * Participate in the design or enhancement stages of product development adding input or offering technical or process driven suggestions to ensure product teams understand any potential security risks and comply with current security standards. * Work with peers in GTRM as well as other IT groups and third parties to identity upcoming business or technical needs and develop solutions within a transparent platform roadmap. * Advise and influence IT and business management regarding identity and access management best practices. * Develop, enhance, and deliver relevant identity and access services that focus on ease of customer integration and improving the overall security posture of the environment. * Ensure the organization has the necessary identity and access capabilities to comply with all laws, regulations and internally developed standards and policies surrounding the confidentiality, availability, and integrity of our information assets. * Maintain healthy and measured accountability between McDonald’s and its suppliers and ensure proper service support documentation is in place to facilitate this accountability.

* 4 year degree or equivalent work experience * Experience in multi-national / global organizations * 8+ years of progressive IT industry experience * Strong history of growing and managing vendor partnerships * 2+ years of identity and access management experience * Strong ability to develop strategic direction and long term objectives without supervision * Proven communication skills with the ability to translate complex technical issues or concepts to non-technical audiences in a clear and concise manner that focuses on business value * Ability to interpret and understand business needs and translate into technology solutions * Strong ability to assess urgency and prioritization and make good decision based upon situational circumstances * Experience with web based single sign on tools, including integrating applications using SAML * Experience with Microsoft Active Directory Federation Services (ADFS) * Experience in web application development and deployment * Familiarity with complex multi-national companies and distributed business models is a plus * Proficient in technical writing and creation of policies, standards, procedures and guidelines * Familiarity with the ITIL operating model, other operational skills such as Six Sigma a plus * Experience with customer single sign on vendors such as Janrain a plus