Security Governance Lead — Cloud, Risk & Compliance

Just Eat Takeaway.com; Woking; On-site; GBP 90,000 - 120,000; Full time

Job summary

Just Eat Takeaway.com in London is seeking an Operational Governance Lead within InfoSec to own the governance framework, policies, controls, and assurance processes across engineering and product teams. You'll connect L1/L2/L3 and ensure evidence flows, draft security standards for AWS/GCP and CI/CD, and track remediation with owners in a fast-moving, cloud-first environment.

This hands-on role suits a security-focused professional who communicates clearly with both technical engineers and risk

Qualifications

• Solid hands-on experience in Information Security GRC within a technology-led or cloud-first organisation.
• Working knowledge of security control frameworks (NIST CSF, ISO 27001).
• Proven ability to coordinate across the Three Lines of Defence.
• Clear communicator with technical and non-technical stakeholders.

Responsibilities

• Maintain and operationalise security governance documentation, policies, standards, and control models.
• Run governance forums and working groups with timely documentation and communication.
• Coordinate evidence gathering and control validation across audit cycles and the control registry.
• Draft and refine security standards for cloud platforms (AWS/GCP) and CI/CD pipelines with Engineering.
• Track exceptions and remediation plans, escalating risks as needed.
• Build KPI/KRI dashboards showing control health and compliance posture.

Skills

Governance coordination

Information Security

GRC frameworks

Cloud platforms

Job description

Just Eat Takeaway.com in London is seeking an Operational Governance Lead within InfoSec to own the governance framework, policies, controls, and assurance processes across engineering and product teams. You'll connect L1/L2/L3 and ensure evidence flows, draft security standards for AWS/GCP and CI/CD, and track remediation with owners in a fast-moving, cloud-first environment.

This hands-on role suits a security-focused professional who communicates clearly with both technical engineers and risk