Service Owner – Infrastructure Security

McDonald’s HQs; Stockholms kommun; On-site; SEK 669,600 - 892,800; Full time

Job summary

McDonald’s HQs is seeking a Service Owner for Infrastructure Security to oversee security services across the Nordics. This role requires at least 5 years of relevant IT experience, focusing on vendor relations and cybersecurity.

The ideal candidate will lead infrastructure security operations, ensuring compliance and effective communication between technical teams and business stakeholders. A background in the retail or restaurant industry is preferred.

Qualifications

• Minimum 5 years of relevant IT experience.
• Proven track record in vendor management, procurement, and contract oversight.
• Deep understanding of cybersecurity principles.

Responsibilities

• Govern standardized, scalable infrastructure security services.
• Define and enforce infrastructure and security policies.
• Drive vendor performance to meet cost targets and SLAs.

Skills

Leadership Mindset

Vendor Relations

Security Literacy

Communication

Tools

PowerShell

Wireshark

Job description

The Role

As the Service Owner for Infrastructure Security Nordics, you hold end-to-end accountability for our security service portfolio across strategic, tactical, and operational levels. Your mission is to ensure that security services continuously evolve to meet business demands while delivering measurable value.

You are technically broad, with a deep experience across diverse infrastructure stacks. In this role, you will transition your hands‑on expertise into a leadership capacity—acting as a subject matter expert and problem manager while steering our external partners toward excellence. In short you will be our Nordic go‑to person regarding security related service operations.

Key Responsibilities

Service Design & Delivery

• Govern standardized, scalable infrastructure security services across the enterprise.
• Act as a consultant to developers and application owners, ensuring "security by design" in new solutions.

Compliance & Risk Management

• Define, maintain, and enforce infrastructure and security policies.
• Ensure strict adherence to organizational standards and IT security baselines.
• Proactively identify and mitigate infrastructure‑related risks.

Vendor & Stakeholder Management

• Drive vendor performance to meet cost targets, SLAs, and KPIs.
• Bridge the gap between technical requirements and business objectives through effective communication.
• Lead the resolution of more severe infrastructure security incidents (Problem Management).

Required Competences

Experience: Minimum 5 years of relevant IT experience. Experience in the retail or restaurant industries is a significant advantage.

• Leadership Mindset: A broad technical background with the desire to move from hands‑on operations to tactical leadership and vendor governance.
• Vendor Relations: Proven track record in vendor management, procurement, and contract oversight within an outsourced IT model.
• Security Literacy: Deep understanding of cybersecurity principles and the technical frameworks required to implement them.
• Communication: Fluent in English (spoken and written), with the ability to influence both technical teams and business stakeholders.

Technical Expertise

Required Core Knowledge

• Network & Core Services: Configuration and management of DHCP, DNS, NTP, and SMTP.
• Architecture: Solid understanding of both Cloud (Azure) and On‑Premises infrastructure.
• Security Services:* Firewall administration and perimeter defense.
  • Vulnerability management lifecycles.
  • Azure and M365 Security ecosystems.
• Other: Ownership of Azure Virtual Desktop & Security forum

Meritorious Knowledge

• Identity & Access Management: Active Directory (Domain Controllers, OU structure, delegation) and Entra ID.
• Endpoint Security: Management of EDR/XDR and device compliance.
• Policy & Governance: Hands‑on experience with risk management practices and security policy enforcement.
• Tools & Automation: Proficiency in PowerShell for automation and Wireshark for deep‑dive troubleshooting.