Security Governance Lead: Cloud & Compliance Orchestrator

Just Eat Takeaway.com; Wallend; On-site; GBP 70,000 - 110,000; Full time

Job summary

Just Eat Takeaway.com is seeking an Operational Governance Lead within the Information Security organization to safeguard our cloud-native platform that serves millions across markets. You will own governance framework delivery, run assurance processes, and act as a bridge between L1, L2, and L3.

The role requires hands-on GRC experience, knowledge of NIST CSF and ISO 27001, and strong communication to translate audits into actionable tasks while maintaining dashboards and control registers.

Qualifications

• Hands-on experience in Information Security GRC within a technology-led or cloud-first organization.
• Working knowledge of security control frameworks (NIST CSF, ISO 27001).
• Proven ability to coordinate across the Three Lines of Defence and translate audit requirements into actionable tasks.
• Excellent communication skills to explain governance requirements to both technical and non-technical stakeholders.
• Organizational skills to manage multiple governance workstreams and track remediation effectively.

Responsibilities

• Own the operational delivery of governance framework, maintaining policies and controls.
• Run assurance processes that make security requirements practical for engineering and product teams.
• Act as the link between L1 engineering, L2 risk/compliance, and L3 audit; ensure flow of evidence and timely resolution of exceptions.
• Draft and refine technical security standards for cloud platforms (AWS/GCP) and CI/CD pipelines.
• Track exceptions and remediation plans with technical owners, escalating risks as needed.
• Build and maintain KPI/KRI dashboards to provide stakeholders with visibility of control health and compliance posture.

Skills

GRC experience

Security governance

Cloud security

Stakeholder communication

Tools

NIST CSF

ISO 27001

Job description

Just Eat Takeaway.com is seeking an Operational Governance Lead within the Information Security organization to safeguard our cloud-native platform that serves millions across markets. You will own governance framework delivery, run assurance processes, and act as a bridge between L1, L2, and L3.

The role requires hands-on GRC experience, knowledge of NIST CSF and ISO 27001, and strong communication to translate audits into actionable tasks while maintaining dashboards and control registers.