Security Governance Lead – Cloud & Compliance (London)

Just Eat Takeaway.com; St Albans; On-site; GBP 90,000 - 120,000; Full time

Job summary

Just Eat Takeaway.com is seeking an Operational Governance Lead in London who will own the operational delivery of governance, policies and controls within the InfoSec function. The role connects L1 engineering, L2 risk/compliance, and L3 audit to ensure evidence flows smoothly and remediation is tracked efficiently.

You’ll draft security standards for cloud platforms, drive governance forums, and maintain a live control registry, enabling fast-paced engineering and product teams to stay

Qualifications

• Solid hands-on experience in Information Security GRC within a tech-driven or cloud-first environment.
• Working knowledge of NIST CSF and ISO 27001 and how they apply to modern engineering including cloud, microservices and DevOps.
• Ability to coordinate across the Three Lines of Defence translating audit and compliance requirements into actionable tasks for engineering teams.
• Clear communicator who can explain governance requirements to both technical and non-technical risk or business stakeholders.
• Organised and delivery-focused, able to manage multiple governance workstreams and keep processes moving in a fast-moving organisation.
• Data-driven approach to compliance tracking with dashboards, spotting trends in control data, and surfacing information for leadership decisions.

Responsibilities

• Maintain and operationalise JET's security governance documentation, standards, and control models aligned to risk appetite and frameworks including NIST CSF and ISO 27001.
• Run governance forums and working groups, ensuring decisions are documented, tracked, and communicated to engineering, risk, and compliance stakeholders in a timely way.
• Coordinate evidence gathering and control validation across L1, L2, supporting audit cycles and maintaining a clear, accountable control registry.
• Draft and refine technical security standards for cloud platforms (AWS/GCP), CI/CD pipelines, and third-party integrations, working with Engineering Leads to embed these into delivery workflows.
• Track exceptions and remediation plans with technical owners, escalating risks where needed and maintaining visibility across the Three Lines of Defence.
• Build and maintain KPI/KRI dashboards that provide stakeholders with clear, accurate visibility of control health and compliance posture.

Skills

Information Security GRC

NIST CSF

ISO 27001

Risk & Compliance Coordination

Stakeholder Communication

Dashboards & KPI tracking

Job description

Just Eat Takeaway.com is seeking an Operational Governance Lead in London who will own the operational delivery of governance, policies and controls within the InfoSec function. The role connects L1 engineering, L2 risk/compliance, and L3 audit to ensure evidence flows smoothly and remediation is tracked efficiently.

You’ll draft security standards for cloud platforms, drive governance forums, and maintain a live control registry, enabling fast-paced engineering and product teams to stay