Cloud Security GRC Lead | ISO 27001 & NIST CSF

Just Eat Takeaway.com; Slough; On-site; GBP 90,000 - 110,000; Full time

Job summary

Just Eat Takeaway.com in London is seeking an Operational Governance Lead to own the operational delivery of governance framework, maintaining policies and controls across engineering and product teams.

You will coordinate evidence gathering, run governance forums, and refine technical security standards for cloud platforms (AWS/GCP) and CI/CD pipelines, ensuring control health and compliance.

Qualifications

• Solid hands-on experience in Information Security GRC within a tech-focused, cloud-first environment.
• Familiarity with security control frameworks and how they apply to engineering, cloud infra, DevOps.
• Ability to translate audit/compliance requirements into actionable tasks for engineering teams.
• Clear communicator who can explain governance to technical and non-technical stakeholders.

Responsibilities

• Maintain and operationalise security governance documentation, standards, and control models.
• Run governance forums and working groups; document, track, and communicate decisions.
• Coordinate evidence gathering and control validation across risk and audit cycles.
• Draft and refine security standards for cloud platforms (AWS/GCP) and CI/CD pipelines.
• Track remediation plans, escalate risks, and maintain a visible control registry.
• Build KPI/KRI dashboards to provide clear visibility of control health and compliance posture.

Skills

GRC governance

Cloud security

Stakeholder coordination

Risk management

Education

Bachelor's degree in Computer Science or related

Tools

NIST CSF

ISO 27001

CI/CD security

Job description

Just Eat Takeaway.com in London is seeking an Operational Governance Lead to own the operational delivery of governance framework, maintaining policies and controls across engineering and product teams.

You will coordinate evidence gathering, run governance forums, and refine technical security standards for cloud platforms (AWS/GCP) and CI/CD pipelines, ensuring control health and compliance.