Service Owner – Infrastructure Security

McDonald's Danmark ApS; Frederiksberg; On-site; DKK 60,000 - 90,000; Full time

Job summary

McDonald's Danmark ApS is hiring a Service Owner for Infrastructure Security in Frederiksberg, Denmark. This role involves leading security service operations, ensuring adherence to policies, and managing vendor relations. Ideal candidates should have at least 5 years of relevant IT experience, preferably in the retail or restaurant sectors. Strong communication skills and an understanding of cybersecurity principles are essential. The position offers a hybrid work environment with opportunities for technical leadership.

Qualifications

• Minimum 5 years of relevant IT experience, preferably in retail or restaurant industries.
• Proven track record in vendor management, procurement, and contract oversight.
• Deep understanding of cybersecurity principles.
• Fluent in English, able to influence technical and business stakeholders.

Responsibilities

• Govern standardized, scalable infrastructure security services across the enterprise.
• Act as consultant to ensure 'security by design'.
• Define and enforce infrastructure and security policies.
• Drive vendor performance and manage severe security incidents.

Job description

• Applications are considered on a rolling basis
• Multiple locations
• Hybrid

The Role

As the Service Owner for Infrastructure Security Nordics, you hold end‑to‑end accountability for our security service portfolio across strategic, tactical, and operational levels. Your mission is to ensure that security services continuously evolve to meet business demands while delivering measurable value.

You are technically broad, with a deep experience across diverse infrastructure stacks. In this role, you will transition your hands‑on expertise into a leadership capacity—acting as a subject matter expert and problem manager while steering our external partners toward excellence. In short you will be our Nordic go‑to person regarding security‑related service operations.

Key Responsibilities

Service Design & Delivery

• Govern standardized, scalable infrastructure security services across the enterprise.
• Act as a consultant to developers and application owners, ensuring “security by design” in new solutions.

Compliance & Risk Management

• Define, maintain, and enforce infrastructure and security policies.
• Ensure strict adherence to organizational standards and IT security baselines.
• Proactively identify and mitigate infrastructure‑related risks.

Vendor & Stakeholder Management

• Drive vendor performance to meet cost targets, SLAs, and KPIs.
• Bridge the gap between technical requirements and business objectives through effective communication.
• Lead the resolution of more severe infrastructure security incidents (Problem Management).

Required Competences

Experience

Minimum 5 years of relevant IT experience. Experience in the retail or restaurant industries is a significant advantage.

• Leadership Mindset: A broad technical background with the desire to move from hands‑on operations to tactical leadership and vendor governance.
• Vendor Relations: Proven track record in vendor management, procurement, and contract oversight within an outsourced IT model.
• Security Literacy: Deep understanding of cybersecurity principles and the technical frameworks required to implement them.
• Communication: Fluent in English (spoken and written), with the ability to influence both technical teams and business stakeholders.

Technical Expertise

Required Core Knowledge

• Network & Core Services: Configuration and management of DHCP, DNS, NTP, and SMTP.
• Architecture: Solid understanding of both Cloud (Azure) and On‑Premises infrastructure.
• Security Services: Firewall administration and perimeter defense.
  • Vulnerability management lifecycles.
  • Azure and M365 Security ecosystems.
• Other: Ownership of Azure Virtual Desktop & Security forum.

Meritorious Knowledge

• Identity & Access Management: Active Directory (Domain Controllers, OU structure, delegation) and Entra ID.
• Endpoint Security: Management of EDR/XDR and device compliance.
• Policy & Governance: Hands‑on experience with risk management practices and security policy enforcement.
• Tools & Automation: Proficiency in PowerShell for automation and Wireshark for deep‑dive troubleshooting.