Supervisor, Technology & Digital Audit

We need to output HTML fragment with headings

for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. Must not repeat job title. Must not include Job ID etc. Must preserve all substantive info. Remove boilerplate: company description? The company description is likely considered boilerplate? The instruction: "Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions." Company description may be considered not boilerplate? It's generic description of McDonald's; likely considered boilerplate? The instruction says remove EEO etc. Company description might be considered not required but could be kept? It says "Preserve ALL substantive information; do NOT invent or summarize away detail." The company description is substantive? It's generic but maybe considered not needed. However they said "Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate". Company description is not that. Might keep as a paragraph under About the role? But they said use headings for sections like About the role, Responsibilities, etc. So we can put company description under About the role heading. We need sections: About the role (maybe includes department overview). Responsibilities (duties). Requirements (maybe qualifications). Qualifications (maybe separate). Skills (maybe list of skills). Benefits (benefits). Pay (salary range). Schedule (maybe not present; if not present, omit). The posting includes "Compensation Bonus Eligible: YES Long - Term Incentive: NO Benefits Eligible: YES Salary Range The expected salary range for this role is 93,208.00-116,510.00 USD per year". Also benefits details. No schedule info. So we omit Schedule. We need to avoid filler like "commensurate with experience". Not present. We need to use

• for any list of duties/requirements/benefits. So duties list, qualifications list maybe, skills list maybe, benefits list. We need to preserve all substantive info. Let's extract: Company Description: McDonald’s is proud to be one of the most recognized brands... (the paragraph). We'll include that as prose under About the role. Department Overview: "Click to addDo you have a passion for Technology? We have an outstanding opportunity for a hardworking standout colleague to join our Technology & Digital team within the Global Internal Audit function! We are pursuing major IT and digital initiatives that include new brand engagement, e-commerce, service delivery, cybersecurity, privacy, cloud migrations, and digital content capabilities. We are seeking passionate team members who want to thrive in this complex environment! Based out of our headquarters in the West Loop of Chicago, the role of the Internal Audit Supervisor, Technology and Digital includes conducting technology-focused reviews in areas such as digital solutions, data integrity and protection, cybersecurity, and privacy, participating in regular risk discussions with leadership, and supervising compliance audits. We conduct technology risk assessments and compliance activities for third party partners and internal clients at our headquarters and at locations around the world." We can combine that as About the role. Duties: list of bullet points after "Duties". Let's extract each sentence as bullet. - Perform risk-based data driven audits related to various areas including data privacy, data protection, cloud infrastructure, network security, secure coding, mobile and web applications, and Internet of Things (IoT). - Develop control matrices and successfully drive audits on-time and on-budget. - Guide and assist the Technology & Digital Audit team in conducting multiple concurrent technology audits and leading the delivery of audit engagements. - Support financial transformation initiatives within McDonald’s, driving process improvements, and optimizing financial operations. - Collaborate with cross-functional teams to drive transformation initiatives and streamline financial operations. - Leverage interpersonal skills to translate complex technical issues or concepts to non-technical audiences in a clear and concise manner that focuses on business value. - Work with IT leadership on technology and digital strategies, privacy and related regulations, customer loyalty program, and cybersecurity. - Partner with management to improve effective identify risks and improve the control environment. - Collaborate with internal audit functional leads for analytics, technology and finance/operations to form integrated approaches. - Perform outreach and maintain collaborative working relationships with partners across product, engineering, security, corporate technology, finance systems and business systems. - Develop and execute risk-based IT and cybersecurity audit plans, including scoping, testing, and reporting of various security domains, including vulnerability management, access control, incident response, data security, and cloud security. - Demonstrate knowledge of current and emerging technology topics including cybersecurity, DevOps, privacy compliance, and data governance. - Participate in risk assessments to identify and measure key risks throughout the organization. - Assist in data analytics conceptualization, design, and development of projects. - Communicate progress of projects to IT Audit Director/Manager on a timely basis. - Work with fellow auditors to navigate through planning activities and utilization of departmental tools. - Share knowledge, deliver training, mentorship, coaching and support to IT Audit staff. Qualifications: list after "Qualifications". Let's extract each bullet. - 2+ years of previous audit-related work experience, such as delivering and/or leading technology focused audits, data driven assessments, cybersecurity audits, program and system implementation reviews and advisory projects - Previous experience leading all aspects of audit work and communicating effectively with various partners (e.g., external/internal audit, senior management, etc.) is highly preferred - Bachelor's degree in Engineering, Computer Science, Information Technology, or Business is highly preferred, but not required - Ability to travel (both domestically and internationally) - Excellent analytical, problem-solving, and critical thinking skills. - Highly proficient in writing reports and including presentation to senior management and leaders. - Strong communication skills, both written and verbal, with the ability to effectively communicate audit findings and recommendations to diverse audiences. - Ability to work independently and collaboratively in a team environment. - Attention to detail, high ethical standards, and a commitment to maintaining confidentiality. - Understanding Windows/Active Directory/Linux systems administration and vulnerabilities. - Experience with programming (Python, Powershell, Go, C, C++, C#, Javascript, etc.), scripting, data analytics, and other technical solution design and development. - Knowledge across a breadth of IT processes, including but not limited to: security operations, program management, security administration, system operations, change management, modern development (e.g., DevOps, Agile), data governance, privacy, and incident/problem management. - Professional credentials such as CISA, CISSP, CEH, CIPT, CDPSE or other relevant certifications are preferred. - Familiarity with information technology, business processes and financial reporting audits and familiarity with control frameworks such as NIST, COBIT, ITIL, PCI, ISO and global data privacy laws (e.g., GDPR, CCPA) We might separate Skills: maybe list of technical skills like programming, etc. But we can treat Qualifications as requirements and Skills as separate list of technical skills. However the instruction: Use headings for Skills if there is real specific content. We have many skill-like items: programming languages, understanding of OS, etc. Could create Skills section. But we must not create thin sections. Perhaps combine Qualifications and Skills into one Requirements section? But they said prefer few substantive sections over many thin ones. We could have About the role, Responsibilities, Requirements (which includes qualifications and skills), Benefits, Pay. That seems reasonable. Thus sections: About the role, Responsibilities, Requirements, Benefits, Pay. We need to include Benefits: list from "Additional Information: Benefits eligible: This position offers health and welfare benefits, including but not limited to comprehensive health insurance, which includes medical, prescription drug, mental health, dental and vision coverage, as well as, life insurance; a 401(k) plan; adoption assistance program; educational assistance program; flexible ways of working; and time off policies (including sick leave, parental leave, and vacation/PTO)." We'll make a Benefits ul. Pay: Salary range and bonus eligible etc. We'll include: Salary range $93,208.00-$116,510.00 per year; Bonus Eligible: YES; Long-Term Incentive: NO; Benefits Eligible: YES. We'll put as prose maybe with ul? It's not a list but we can use

  . Now we must not include boilerplate like EEO etc. Remove all that after "Additional Information:"? Actually after benefits there is EEO statement. We'll remove that. Also remove "Click to add" maybe it's artifact; we can ignore. Now produce HTML fragment:

  About the role

  McDonald’s is proud to be one of the most recognized brands in the world, with restaurants in over 100 countries that serve 70 million customers daily. We continue to operate from a position of strength. Our updated growth strategy is focused on staying ahead of what our customers want and realizing further growth potential. Our relentless ambition is why McDonald’s remains one of the world’s leading corporations after almost 70 years. Joining McDonald's means thinking big and preparing for a career that can have influence around the world. At McDonald’s, we see every day as a chance to create positive impact. We lead through our values centered on inclusivity, service, integrity, community and family. From support of Ronald McDonald House to our Youth Opportunity project and sustainability initiatives, our values keep us dedicated to using our scale for good: good for our customers, people, industry and planet. We also offer a broad range of outstanding benefits including a sabbatical program, tuition assistance and flexible work arrangements. Based out of our headquarters in the West Loop of Chicago, the role of the Internal Audit Supervisor, Technology and Digital includes conducting technology-focused reviews in areas such as digital solutions, data integrity and protection, cybersecurity, and privacy, participating in regular risk discussions with leadership, and supervising compliance audits. We conduct technology risk assessments and compliance activities for third party partners and internal clients at our headquarters and at locations around the world.

  Responsibilities

  • Perform risk-based data driven audits related to various areas including data privacy, data protection, cloud infrastructure, network security, secure coding, mobile and web applications, and Internet of Things (IoT).
  • Develop control matrices and successfully drive audits on-time and on-budget.
  • Guide and assist the Technology & Digital Audit team in conducting multiple concurrent technology audits and leading the delivery of audit engagements.
  • Support financial transformation initiatives within McDonald’s, driving process improvements, and optimizing financial operations.
  • Collaborate with cross-functional teams to drive transformation initiatives and streamline financial operations.
  • Leverage interpersonal skills to translate complex technical issues or concepts to non-technical audiences in a clear and concise manner that focuses on business value.
  • Work with IT leadership on technology and digital strategies, privacy and related regulations, customer loyalty program, and cybersecurity.
  • Partner with management to improve effective identify risks and improve the control environment.
  • Collaborate with internal audit functional leads for analytics, technology and finance/operations to form integrated approaches.
  • Perform outreach and maintain collaborative working relationships with partners across product, engineering, security, corporate technology, finance systems and business systems.
  • Develop and execute risk-based IT and cybersecurity audit plans, including scoping, testing, and reporting of various security domains, including vulnerability management, access control, incident response, data security, and cloud security.
  • Demonstrate knowledge of current and emerging technology topics including cybersecurity, DevOps, privacy compliance, and data governance.
  • Participate in risk assessments to identify and measure key risks throughout the organization.
  • Assist in data analytics conceptualization, design, and development of projects.
  • Communicate progress of projects to IT Audit Director/Manager on a timely basis.
  • Work with fellow auditors to navigate through planning activities and utilization of departmental tools.
  • Share knowledge, deliver training, ment