Operational Governance Lead, InfoSec

Just Eat Takeaway.com; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Just Eat Takeaway.com in London is seeking an Operational Governance Lead within the InfoSec function to own the day-to-day governance of policies, controls and assurance across a cloud-native platform. You will coordinate evidence gathering across L1/L2/L3, run governance forums, and refine security standards for AWS/GCP and CI/CD pipelines, embedding them into delivery workflows.

As a key liaison between engineering, risk and audit, you will track exceptions, remediation plans and maintain a

Qualifications

• Solid hands-on experience in Information Security GRC within a technology-led or cloud-first organisation.
• Working knowledge of security control frameworks (NIST CSF, ISO 27001) and how they apply to modern engineering environments.
• Proven ability to coordinate across the Three Lines of Defence translating audit and compliance requirements into actionable tasks.

Responsibilities

• Maintain and operationalise governance documentation, standards and control models aligned to risk appetite and frameworks.
• Run governance forums and working groups, documenting decisions and communicating to stakeholders in a timely way.
• Coordinate evidence gathering and control validation across L1/L2 and audit cycles with a clear control registry.
• Draft and refine technical security standards for cloud platforms (AWS/GCP) and CI/CD pipelines, embedding into delivery workflows.
• Track exceptions and remediation plans with owners, escalating risks and maintaining visibility across the Three Lines of Defence.
• Build and maintain KPI/KRI dashboards providing clear visibility of control health and compliance posture.

Skills

Security Governance

GRC

Cloud Security

Stakeholder Management

Audit Coordination

Job description

Just Eat Takeaway.com in London is seeking an Operational Governance Lead within the InfoSec function to own the day-to-day governance of policies, controls and assurance across a cloud-native platform. You will coordinate evidence gathering across L1/L2/L3, run governance forums, and refine security standards for AWS/GCP and CI/CD pipelines, embedding them into delivery workflows.

As a key liaison between engineering, risk and audit, you will track exceptions, remediation plans and maintain a