Privacy Analyst

McDonald's - Chicago, IL

Full-time - Mid Level

Chicago, IL

Food Services and Drinking Places

About the position

McDonald's Privacy Team is a global team within the Legal & Compliance Department comprised of lawyers and other professionals located in the US and the EU. In collaboration with other global teams (e.g., Global Cyber Security, Enterprise Data Governance) and McDonald's market legal teams, the Privacy Team develops, operates, and manages McDonald's global privacy program and advises on US and global initiatives involving personal data. The Privacy Analyst will be responsible for supporting the Senior Privacy Analyst and other members of the Privacy Team in the development, implementation, maintenance, day-to-day oversight, and management of the operational aspects of McDonald's global privacy program. The ideal candidate is comfortable working collaboratively within cross-functional legal and business teams and using technology to improve the efficiency of our privacy program, and is continuously learning and maintaining up-to-date knowledge of US and global privacy laws (e.g., CCPA/CPRA, GDPR). This role will also support various privacy activities to help protect and safeguard the customer, employee, franchisee, and supplier personal data that is entrusted to McDonald's.

Responsibilities

• Assist in the development, implementation and ongoing maintenance of global privacy policies, procedures, requirements and notices.
• Assist in conducting annual assessments of McDonald's global privacy program, identify areas of opportunities and design and implement improvements to help ensure McDonald's compliance with global privacy laws.
• Assist in managing our OneTrust Privacy Management Platform including training and assisting business teams and market legal teams in their use of the platform and working with Global Cyber Security team to maintain the platform.
• Support the maintenance of McDonald's Data Privacy Framework certification.
• Assist in developing and delivering, with input from key stakeholders, enterprise-wide and role-based privacy trainings.
• Collaborate with the Government Relations team to review and assess proposed privacy-related legislation.
• Support the day-to-day operations of McDonald's Individual Rights program.
• Assist in maintaining records of processing activities and data processing inventory.
• Engage and liaise with other legal and business teams to provide guidance on and ensure privacy considerations are integrated into project planning and day-to-day operations.
• Provide privacy guidance and requirements to business teams for the onboarding & offboarding of third party vendors.
• Assist in managing and maintaining privacy metrics reporting.
• Assist in managing external-facing Contact Privacy inbox.

Requirements

• At least 3 years of experience working in a privacy function.
• Bachelor's degree preferred.
• Background in or good understanding of information security preferred.
• One or more IAPP certifications (e.g., CIPP, CIPM, CIPT) preferred.
• OneTrust experience, knowledge and certification preferred.
• Familiarity with US, EU, and other global privacy laws and regulations, such as CCPA/CPRA and GDPR.
• Experience supporting privacy and consent management, individual rights, compliance processes, policies, reporting and controls.
• Strong analytical, communication, organizational, and presentation skills.
• Excellent written and verbal communication skills.
• Must be able to develop and articulate strategy for process improvement.
• Works effectively as a team member but can also work independently.

Benefits

• Sabbatical program
• Tuition assistance
• Flexible work arrangements