InfoSec GRC Operations Lead

Just Eat Takeaway.com; Slough; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Just Eat Takeaway.com is seeking an Operational Governance Lead within InfoSec to own the operational delivery of governance, policies, and controls. You’ll ensure evidence flows between engineering, risk, compliance, and audit teams, and help embed security requirements into delivery workflows across cloud platforms.

The role focuses on running governance forums, maintaining control registries, and producing KPI dashboards to keep governance at pace in a fast-moving, cloud-native environment.

Qualifications

• Solid hands-on experience in Information Security GRC within a technology-led or cloud-first organisation.
• Proven ability to translate audit and compliance requirements into actionable tasks for engineering teams.
• Strong knowledge of security control frameworks (NIST CSF, ISO 27001) and embedding them into delivery workflows.

Responsibilities

• Maintain and operationalise security governance documentation, policies, standards, and control models.
• Run governance forums and working groups; document, track, and communicate decisions to stakeholders.
• Coordinate evidence gathering and control validation across L1/L2 and audit cycles.
• Draft and refine technical security standards for cloud platforms (AWS/GCP) and CI/CD pipelines.
• Track exceptions and remediation plans; escalate risks and maintain a clear control registry.
• Build and maintain KPI/KRI dashboards to provide visibility of control health.

Skills

GRC governance

NIST CSF

ISO 27001

Cloud security

Stakeholder management

Awareness of audits

Tools

AWS

GCP

Job description

Just Eat Takeaway.com is seeking an Operational Governance Lead within InfoSec to own the operational delivery of governance, policies, and controls. You’ll ensure evidence flows between engineering, risk, compliance, and audit teams, and help embed security requirements into delivery workflows across cloud platforms.

The role focuses on running governance forums, maintaining control registries, and producing KPI dashboards to keep governance at pace in a fast-moving, cloud-native environment.