Operational Governance Lead

Just Eat Takeaway.com; Ewell; On-site; GBP 90,000 - 130,000; Full time

Job summary

Just Eat Takeaway.com in London is seeking an Operational Governance Lead to own the operational delivery of governance, policies and controls within the InfoSec function. You will align risk and compliance activities with engineering and product teams, ensuring evidence flows and exceptions are resolved.

You will build dashboards, coordinate audit cycles, and draft security standards for cloud platforms (AWS/GCP), CI/CD pipelines, and third-party integrations, while keeping the governance

Qualifications

• Hands-on Information Security GRC experience in a tech-led or cloud-first org.
• Knowledge of security control frameworks (NIST CSF, ISO 27001) and their application to modern engineering (cloud, microservices, DevOps).
• Ability to coordinate across the Three Lines of Defence translating audit and compliance into actionable tasks for engineering teams.
• Clear communicator who explains governance requirements to technical and non-technical stakeholders.
• Organised and delivery-focused, able to manage multiple governance workstreams.
• Data-driven approach to compliance tracking with dashboards and trends.

Responsibilities

• Maintain and operationalise governance documentation, standards, and control models aligned to risk appetite.
• Run governance forums and working groups; document, track, and communicate decisions.
• Coordinate evidence gathering and control validation across L1/L2 and audit cycles.
• Draft and refine technical security standards for cloud platforms (AWS/GCP), CI/CD, and third-party integrations.
• Track exceptions and remediation plans, escalating risks when needed.
• Build and maintain KPI/KRI dashboards for visibility into control health and compliance posture.

Skills

InfoSec GRC

NIST CSF

ISO 27001

Cloud security

DevOps security

Stakeholder comms

Risk & compliance

Job description

Operational Governance Lead

2026-09-16T00:00:00

East Ewell
Surrey
GB
KT17 3

Full Time

2026-10-14T18:00:35.377

Position: Operational Governance Lead
Department: InfoSec
Location: London - 3 days on-site
Full Time

Ready for a challenge? Then Just Eat Takeaway.com might be the place for you. We're a leading global online delivery platform, and our vision is to empower everyday convenience. Whether it's a Friday-night feast, a post-gym poke bowl, or grabbing some groceries, our tech platform connects tens of millions of customers with hundreds of thousands of restaurant, grocery and convenience partners across the globe.

About this role

JET's Information Security organisation protects a technology-led, cloud-native platform serving millions of customers across multiple markets. JET's Security Governance function sets the standards that keep a large, cloud-native technology organisation secure and compliant. As Operational Governance Lead, you'll own the operational delivery of JET's governance framework maintaining policies and controls, running assurance processes, and making security requirements work in practice for engineering and product teams. You'll be the day-to-day connective tissue between L1 engineering, L2 risk and compliance, and L3 audit ensuring control evidence flows cleanly and exceptions get resolved. These are some of the key components to the position:

• Maintain and operationalise JET's security governance documentation policies, standards, and control models keeping them aligned to JET's risk appetite and frameworks including NIST CSF and ISO 27001.
• Run governance forums and working groups, ensuring decisions are documented, tracked, and communicated to engineering, risk, and compliance stakeholders in a timely way.
• Coordinate evidence gathering and control validation across L1, L2, supporting audit cycles and maintaining a clear, accountable control registry.
• Draft and refine technical security standards for cloud platforms (AWS/GCP), CI/CD pipelines, and third-party integrations, working with Engineering Leads to embed these into delivery workflows.
• Track exceptions and remediation plans with technical owners, escalating risks where needed and maintaining visibility across the Three Lines of Defence.
• Build and maintain KPI/KRI dashboards that provide stakeholders with clear, accurate visibility of control health and compliance posture.

What will you bring to the team?

• Solid hands-on experience in Information Security GRC within a technology-led or cloud-first organisation, with a track record of keeping governance frameworks operational at pace.
• Working knowledge of security control frameworks (NIST CSF, ISO 27001) and how they apply to modern engineering environments including cloud infrastructure, microservices, and DevOps.
• Proven ability to coordinate across the Three Lines of Defence translating audit and compliance requirements into clear, actionable tasks for engineering teams without creating unnecessary friction.
• Clear communicator who can explain governance requirements and control expectations to both technical engineers and non-technical risk or business stakeholders.
• Organised and delivery-focused, with the ability to manage multiple governance workstreams, track remediation through to closure, and keep processes running in a fast-moving organisation.
• Data-driven approach to compliance tracking comfortable building dashboards, spotting trends in control data, and surfacing the right information to support leadership decisions.

At JET, this is how we play

Our teams forge connections internally and work with some of the best-known brands on the planet, giving us truly international impact in a dynamic environment. Being the best at what we do isn't just about delivering on our strategy. It's a competition for something incredibly valuable - our customers' choice. Every time a customer decides where to order, they're picking a side. At the heart of the JET Customer League are our values and behaviours. They guide every interaction, every decision, every innovation. These are the actions we need to perform consistently and brilliantly, to surpass the competition and earn our customers' loyalty, again and again.

Fun, fast-paced and supportive, the JET culture is about movement, growth, helping one another to succeed and celebrating wins. By truly living our values and embodying our behaviours, we're building a customer-first culture which enables us to stay one step ahead of the competition.

Inclusion, Diversity & Belonging

No matter who you are, what you look like, who you love, or where you are from, you can find your place at Just Eat Takeaway.com. We're committed to creating an inclusive culture, encouraging diversity of people and thinking, in which all employees feel they truly belong and can bring their most colourful selves to work every day.

What else is cooking?

Want to know more about our JETers, culture or company? Have a look at our career site where you can find people's stories, blogs, podcasts and more JET morsels.