Analyst, Cybersecurity Operations

Department Overview

The Cybersecurity Data Security team is responsible for protecting McDonald’s information across the enterprise—wherever it lives and however it is used. We focus on building strong, scalable data security operations that balance protection with productivity, without compromising effectiveness. We are seeking an Analyst, Data Security Operations to support day‑to‑day operational activities across data classification, data retention, and email security. This role is ideal for an analyst who thrives in operational execution, enjoys collaborating across teams, and brings structure and clarity to complex data security challenges. This role will partner closely with stakeholders across Global Cybersecurity, Legal, Privacy, IT, and business teams to ensure data security controls are consistently implemented and continuously improved.

Duties

Responsibilities

• Analyze and escalate data security events and risks related to data classification, data retention, and email security to appropriate McDonald’s stakeholders. 
• Report critical and high‑severity data security incidents to data security leadership as required. · Support the design, testing, deployment, and maintenance of data security operational controls across McDonald’s markets.
• Partner with regional and global teams to ensure consistent execution and continuous improvement of data security controls. · Help define and track data security operational metrics, including key risk and performance indicators.
• Develop and deliver clearly, executives ready reports on data security operations and risk trends. · Create and maintain data security control documentation, including control intent, logic, escalation workflows, and exception handling.
• Maintain operational documentation and runbooks for data security tools and processes. · Perform troubleshooting and remediation of data security tool issues by collaborating with the Help Desk, end users, and vendors.
• Follow established change management processes to implement updates to data classification labels and label policies. · Support data classification integrations with other enterprise security and productivity technologies.
• Contribute to process improvements that increase efficiency, visibility, and effectiveness of data security operations.

Qualifications

• 2+ years of experience in data security operations, including data classification, data retention, or email security.
• 2+ years of experience supporting, operating, or tuning data security controls in an enterprise environment.
• Experience with data classification and email security technologies such as Microsoft Purview, Proofpoint, or similar platforms · Strong analytical skills with the ability to synthesize information from multiple sources and drive clear outcomes.
• Demonstrated ability to work cross‑functionally with technical and non‑technical stakeholders.
• Ability to operate independently in a fast‑paced, evolving environment.
• Strong judgment and problem‑solving skills when overseeing complex or ambiguous situations.
• Excellent time management, organization, and prioritization skills.
• Prominent level of integrity, professionalism, and accountability.

Preferred Qualifications:

• Willingness and curiosity to learn additional data protection capabilities within a global enterprise.
• Familiarity with cybersecurity frameworks and standards such as NIST CSF, CIS Controls, or SOC 2
• Exposure to data protection regulations such as GDPR, SOX, PCI, or CCPA
• Experience working within large, multinational organizations with distributed operating models.
• Relevant professional certifications (e.g., CISM, CIPP, CISSP, or similar) 

Compensation

Bonus Eligible: Yes

Long - Term Incentive: No

Benefits Eligible: Yes

Salary Range

The expected salary range for this role is $104,482.00 - $130,602.00 per year
 
The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we may also consider your experience, and other job-related factors.