McDonald's Director-Enterprise Risk Management in Oak Brook, Illinois
The Director, Enterprise Risk Management, is responsible for managing McDonald’s Enterprise Risk Management (ERM) program, including supporting the identification, evaluation, mitigation, and monitoring of McDonald’s operational and strategic risks. Coaches functional and market leadership in the development of risk mitigation plans consistent with McDonald’s enterprise risk management framework. In conjunction with the ERM Committee and the ERM Working Group, the Director gathers feedback on mitigating controls and risk appetite from leadership, monitors risk management activities, and prepares quarterly enterprise risk reports and annual ERM report for the Board of Directors. Position reports to Corporate VP & Global Chief Compliance Officer.
McDonald’s Corporation is an equal opportunity employer committed to a diverse and inclusive workforce.
Bachelor degree required. Master’s degree or equivalent in relevant field preferred
7+ years of ERM, Internal Audit and Controls, Strategic Advisory or other relevant Business Consulting background.
Experience interacting at all levels of an organization, including staff, management and executives.
Strong project management and reporting skills.
Proficiency in Microsoft Word, PowerPoint, and Excel required; ERM software skills a plus.
Experience implementing an ERM program, including advising leadership on program enhancements and leveraging internal and external resources strongly preferred.
A. Manage ERM Framework
a. Responsible for McDonald's ERM program, including implementing a uniform and sustainable ERM process and a common risk language
b. Provide a consistent and efficient approach to identify, prioritize and analyze enterprise risks to align with McDonald’s risk appetite
c. Leverage existing functional processes and personnel to monitor and report enterprise risks
d. Integrate ERM with Strategy and Business Development, Global Compliance, and Internal Audit and Control and other functions as appropriate
e. Staff ERM Committee and ERM Working Group
B. Risk Identification
a. Work with functional, market, and project leads, along with other system subject matter experts to identify risks
b. Benchmark with external organizations and peers to identify risk trends and best practices and incorporate relevant learnings into McDonald's risk assessment process
c. Serve in a risk management advisory role for segment and market leadership, assist in surfacing market level risks that may result in enterprise-wide impact
C. Risk Monitoring and Reporting
a. Engage all risk functions such as Internal Audit and Control, Global Compliance, Global Technology Risk Management (GTRM), Global Safety and Security, Strategy and Business Development, and Global Supply Chain to monitor risk mitigation activities and report on enterprise risks
b. Work with risk functions to coordinate periodic “deep dive” assessments of enterprise risks and report outcomes to the ERM Committee and the Board
D. Internal and External Engagement
a. Build strong internal relationships, including with global functions and segment and market leadership, to ensure access and insight into risk identification and risk management processes and to provide the enterprise-wide risk perspective
b. Engage external resources including peers, advisory firms, and ERM organizations to benchmark and interject outside perspectives with respect to innovations in risk identification and risk mitigation, and align with best practices
Director-Enterprise Risk Management