Cybersecurity Architect

McDonald's; Chicago (IL); On-site; USD 138,000 - 173,000; Full time

Job summary

McDonald’s Global Technology seeks a Cybersecurity Solution Architect to define and apply security requirements across products and platforms. You will lead threat modeling, security reviews, and risk-based design decisions in a global, matrixed environment.

You will translate policies into practical design outcomes, contribute to reusable security patterns, and influence delivery teams without direct authority, collaborating with product, engineering, and privacy teams.

Qualifications

• Bachelor’s degree or equivalent practical experience in a relevant field.
• 4–6 years of technical leadership in security.
• Hands-on in information security, security engineering, or architecture.
• Knowledge of multiple security domains and cloud platforms.
• Experience with security architecture reviews, threat modeling, and design assurance.
• Familiarity with NIST CSF and ISO 27001 and applying them to decisions.

Responsibilities

• Apply cybersecurity architecture principles across products, platforms, and services.
• Embed security into planning, design, delivery, and operational readiness.
• Facilitate architecture reviews and threat modeling exercises.
• Translate policies into technical requirements and guardrails.
• Create reusable security architecture artifacts and guardrails.
• Document decisions, risks, mitigations, and owners; communicate clearly to stakeholders.
• Influence delivery teams through evidence-based recommendations.
• Assess alignment with McDonald’s policies and standards.

Skills

Technical leadership in security

Security engineering

Solution architecture

Cloud architecture

Threat modeling

Risk assessment

Collaboration

Influence without authority

Communication

Analytical problem solving

Prioritization

Teamwork

Security frameworks (NIST CSF)

Security frameworks (ISO 27001)

Security certifications (CISSP, CCSP,C

Education

Bachelor’s degree in CS/Cybersecurity/IT/Engineering

Equivalent practical experience

Certifications: CISSP, CCSP, CISM, TOGAF, AWS/Solution Architect, Azure/Solution Architect, Google Cloud Security Architect

Tools

AWS

Azure

GCP

Threat Modeler

Irius Risk

Job description

Job Description:

Company Description:

McDonald’s growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omni-channel restaurant brand. As the consumer landscape shifts we are using our competitive advantages to further strengthen our brand. One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital and Drive Thru). McDonald’s will accelerate technology innovation so 65M+ customers a day will experience a fast, easy experience, whether at one of our 25,000 and growing Drive thrus, through McDelivery, dine-in or takeaway.

McDonald’s Global Technology is here to power tomorrow’s feel-good moments.

That’s why you’ll find us at the forefront of transformative technology, exploring new and innovative ways to serve our millions of customers and spread happiness one delicious Hot Fudge Sundae-dipped fry at a time.Using AI, robotics and emerging tech, we’re digitizing the Golden Arches. Combine that with our unparalleled global scale, and we’re reshaping all areas of the business, industry and every community that is home to a McDonald’s restaurant.We face complex tech challenges every day. But that’s where our diverse and talented teams come in. They’re made up of the best and brightest from all over the globe, and they thrive in the space where feel-good meets fast-paced.

Check out the McDonald’s Global Technology Technical Blog (https://medium.com/mcdonalds-technical-blog) to learn how technology and our global team are directly enabling the Accelerating the Arches strategy.

Department Overview

The Global Cybersecurity (GCS) Cybersecurity Solution Architect helps define, communicate, and apply cybersecurity requirements and security architecture throughout the lifecycle of technology products and platforms. The architect uses broad technical knowledge, practical risk judgment, and collaborative problem solving to help teams design solutions that protect confidentiality, integrity, availability, privacy, and compliance. This role supports architecture reviews, threat modeling, and the development of reusable security patterns and guardrails. Throughout the review process, the architect documents security requirements, design decisions, risks, exceptions, and mitigations, and works with delivery teams to translate security expectations into practical technical outcomes. The role partners across the Global Technology organization, including product management, engineering, architecture, privacy, risk, and business teams. Success requires technical credibility, clear communication, sound facilitation, and the ability to influence decisions through evidence and trusted relationships. This role is part of the Global Cybersecurity function and the Cybersecurity Architecture and Engineering team and reports to the Senior Manager of Cybersecurity Solution Architecture.

Accountabilities & Responsibilities

• Apply cybersecurity architecture principles to technology products, platforms, applications, and services in alignment with business priorities, company standards, and industry practices.
• Partner with technology and business teams to embed security into planning, design, delivery, and operational readiness.
• Facilitate architecture reviews and technical working sessions to identify security gaps, clarify design tradeoffs, and recommend proportionate, risk-based mitigations.
• Perform or support threat modeling, security architecture assessments, control mapping, and design reviews across cloud, application, identity, network, endpoint, IoT, and other technology domains.
• Translate security policies, standards, and regulatory obligations into clear technical requirements, guardrails, and actionable recommendations.
• Contribute to reusable security architecture artifacts, reference architectures, security models, standards, and design patterns that improve consistency and accelerate delivery.
• Document architecture decisions, security requirements, identified risks, exceptions, compensating controls, owners, and agreed remediation actions.
• Communicate technical and risk topics in concise, audience-appropriate language for engineers, architects, product teams, business partners, and leadership.
• Influence delivery teams without direct authority by using credible technical analysis, active listening, practical options, and an understanding of business context.
• Assess solution alignment with McDonalds policies and applicable frameworks, including NIST CSF, and ISO 27001, and help teams convert requirements into implementable design outcomes.
• Mature threat modeling capabilities within the architecture team and technology team. Leverage threat modeling tools like Threat Modeler/Irius Risk.
• Stay current on emerging security threats, architecture practices, cloud services, engineering patterns, and relevant technology trends, and share practical guidance with colleagues and delivery teams.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or equivalent practical experience.
• 4–6 years of technical leadership experience within the security vertical, including responsibility for guiding technical decisions, coordinating security work across teams, or leading security-focused design and delivery activities.
• Hands-on experience in information security, security engineering, solution architecture, application architecture, cloud architecture, or a closely related technical role.
• Working knowledge across several security domains, such as identity and access management, data protection, encryption, cloud security (AWS, Azure, or GCP), DevSecOps, application security, platform security, endpoint security, IoT, OT, network security, or zero-trust architecture.
• Experience participating in or facilitating security architecture reviews, threat modeling, control reviews, or design assurance activities.
• Knowledge of security frameworks and standards such as NIST CSF, and ISO 27001, with the ability to apply them to practical technology decisions.
• Ability to evaluate solution designs, identify material security risks, explain tradeoffs, and recommend pragmatic controls or mitigations.
• Strong collaboration and relationship-building skills, including active listening, curiosity, and the ability to establish trust with technical and non-technical partners.
• Effective influencing and consulting skills, with the ability to guide decisions and encourage adoption without direct authority.
• Clear verbal, written, and presentation skills, with the ability to simplify complex security topics for different audiences.
• Strong analytical and problem-solving skills, sound judgment, and the ability to organize ambiguous information into clear findings and next steps.
• Ability to manage multiple priorities, adapt to organizational change, and maintain progress in a global, matrixed environment.
• A collaborative mindset that encourages shared ownership of security and contributes to an inclusive, high-performing culture.
• Security or architecture certifications such as CISSP, CCSP, CISM, TOGAF, AWS Certified Solution Architect, Microsoft Certified: Azure Solution Architect, or Google Professional Cloud Security Architect are preferred; equivalent demonstrated experience will be considered.

Compensation

Bonus Eligible: YES

Long - Term Incentive: YES

Benefits Eligible: YES

Salary Range

The expected salary range for this role is $138,207.00 - $172,758.00 per year

The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we may also consider your experience, and other job-related factors.

Additional Information

Benefits eligible: This position offers health and welfare benefits, including but not limited to comprehensive health insurance, which includes medical, prescription drug, mental health, dental and vision coverage, as well as, life insurance.

Bonus eligible: This position is eligible for a bonus, calculated based on individual and company performance.

Long term Incentive eligible: This position is eligible for stock or other equity grants pursuant to McDonald’s long-term incentive plan.

McDonald’s is an equal opportunity employer. We promote an inclusive work environment that creates feel-good moments for everyone. McDonald’s provides reasonable accommodations to qualified individuals with disabilities as part of the application or hiring process or to perform the essential functions of their job. If you need assistance accessing or reading this job posting or otherwise feel you need an accommodation during the application or hiring process, please contact [e-mail]. Reasonable accommodations will be determined on a case-by-case basis.

McDonald’s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Nothing in this job posting or description should be construed as an offer or guarantee of employment.