Security Governance Lead – GRC & Cloud Compliance

Just Eat Takeaway.com; Esher; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Just Eat Takeaway.com is seeking an Operational Governance Lead in London. In the InfoSec team, you will own the operational delivery of governance, maintain policies and controls, run assurance processes, and ensure security requirements work in practice for engineering and product teams.

You’ll be the day-to-day connective tissue between L1, L2 risk/compliance, and L3 audit. You’ll coordinate evidence gathering, draft technical standards for cloud platforms (AWS/GCP) and CI/CD, track

Qualifications

• Solid hands-on experience in Information Security GRC within a technology-led or cloud-first organisation.
• Working knowledge of security control frameworks (NIST CSF, ISO 27001) and how they apply to modern engineering environments including cloud infrastructure, microservices, and DevOps.
• Proven ability to coordinate across the Three Lines of Defence translating audit and compliance requirements into clear, actionable tasks for engineering teams without creating unnecessary friction.
• Clear communicator who can explain governance requirements and control expectations to both technical engineers and non-technical risk or business stakeholders.
• Organised and delivery-focused, with the ability to manage multiple governance workstreams, track remediation through to closure, and keep processes running in a fast-moving organisation.
• Data-driven approach to compliance tracking comfortable building dashboards, spotting trends in control data, and surfacing the right information to support leadership decisions.

Responsibilities

• Maintain governance policies, standards and control models aligned to risk appetite.
• Run governance forums and track decisions with stakeholders in a timely way.
• Coordinate evidence gathering and control validation across L1, L2, supporting audit cycles and a clear control registry.
• Draft and refine technical security standards for cloud platforms (AWS/GCP), CI/CD pipelines, and third-party integrations.
• Track exceptions and remediation plans with technical owners, escalating risks where needed.
• Build and maintain KPI/KRI dashboards that provide stakeholders with clear, accurate visibility of control health and compliance posture.

Skills

GRC Governance

NIST CSF

ISO 27001

Cloud security

Three Lines of Defence

DevOps

AWS/GCP

KPI dashboards

Job description

Just Eat Takeaway.com is seeking an Operational Governance Lead in London. In the InfoSec team, you will own the operational delivery of governance, maintain policies and controls, run assurance processes, and ensure security requirements work in practice for engineering and product teams.

You’ll be the day-to-day connective tissue between L1, L2 risk/compliance, and L3 audit. You’ll coordinate evidence gathering, draft technical standards for cloud platforms (AWS/GCP) and CI/CD, track