Security Governance Lead — Cloud & Compliance

Just Eat Takeaway.com; Epsom; On-site; GBP 90,000 - 130,000; Full time

Job summary

Just Eat Takeaway.com is seeking an Operational Governance Lead within the InfoSec team to own the day-to-day governance of security controls across our cloud-native platform. You will coordinate evidence for audits, maintain control registries, and drive consistent delivery of governance requirements across engineering and product teams.

The role requires collaborating with L1/L2/L3 functions to ensure controls are embedded in delivery workflows, with a strong focus on risk reduction and

Qualifications

• Extensive hands-on experience in Information Security GRC within a tech-driven organisation.
• Knowledge of security control frameworks (NIST CSF, ISO 27001) and cloud-native environments.
• Ability to coordinate across the Three Lines of Defence and translate audits into actionable tasks for engineering teams.
• Clear communicator able to explain governance requirements to both engineers and non-technical stakeholders.
• Organised, delivery-focused, and capable of managing multiple governance workstreams in a fast-moving company.
• Data-driven with dashboard-driven compliance tracking and trend analysis for leadership decisions.

Responsibilities

• Maintain and operationalise governance documentation, standards and control models aligned to risk appetite.
• Run governance forums and working groups with timely communication to stakeholders.
• Coordinate evidence gathering and control validation across L1/L2/audit cycles and maintain a control registry.
• Draft and refine technical security standards for cloud platforms, CI/CD pipelines, and integrations with Eng Leads.
• Track exceptions and remediation plans, escalating risks and ensuring visibility across the Three Lines of Defence.
• Build and maintain KPI/KRI dashboards for visibility of control health and compliance posture.

Job description

Just Eat Takeaway.com is seeking an Operational Governance Lead within the InfoSec team to own the day-to-day governance of security controls across our cloud-native platform. You will coordinate evidence for audits, maintain control registries, and drive consistent delivery of governance requirements across engineering and product teams.

The role requires collaborating with L1/L2/L3 functions to ensure controls are embedded in delivery workflows, with a strong focus on risk reduction and