InfoSec Governance Lead: Cloud, Risk & Compliance

Just Eat Takeaway.com; Enfield; On-site; GBP 75,000 - 95,000; Full time

Job summary

Just Eat Takeaway.com is seeking an Operational Governance Lead in London to manage governance documentation, controls, and assurance across engineering and product teams. You will lead governance forums, coordinate evidence for audits, and shape security standards for cloud platforms and CI/CD pipelines.

You will drive remediation tracking, escalate risks, and deliver dashboards that provide clear visibility into control health and compliance posture across the organisation.

Qualifications

• Experience in Information Security GRC within a technology-led environment.
• Familiarity with NIST CSF and ISO 27001 applied to engineering teams.
• Ability to translate audit/compliance requirements into actions for engineers.

Responsibilities

• Maintain and operationalise governance documentation, standards, and control models.
• Run governance forums and working groups with stakeholders in engineering, risk, and compliance.
• Coordinate evidence gathering and control validation across L1/L2/audit cycles.
• Draft and refine technical security standards for cloud platforms (AWS/GCP) and CI/CD pipelines.
• Track exceptions and remediation plans with technical owners and escalate risks as needed.
• Build and maintain KPI/KRI dashboards to show control health and compliance posture.

Skills

GRC in Information Security

Security frameworks (NIST CSF/ISO 2701

Three Lines of Defence coordination

Clear communicator

Organised delivery focus

Data-driven compliance dashboards

Job description

Just Eat Takeaway.com is seeking an Operational Governance Lead in London to manage governance documentation, controls, and assurance across engineering and product teams. You will lead governance forums, coordinate evidence for audits, and shape security standards for cloud platforms and CI/CD pipelines.

You will drive remediation tracking, escalate risks, and deliver dashboards that provide clear visibility into control health and compliance posture across the organisation.