Security Governance Lead, GRC & Cloud Controls

Just Eat Takeaway.com; Watford; On-site; GBP 70,000 - 100,000; Full time

Job summary

Just Eat Takeaway.com invites applications for an Operational Governance Lead within its Information Security organization. You will own the governance framework, ensuring policies and controls are maintained, and you will coordinate with L1, L2, and L3 stakeholders to maintain seamless control evidence flow.

You will run assurance processes, draft security standards for cloud platforms (AWS/GCP) and CI/CD pipelines, and track remediation with technical owners while building KPI dashboards for

Qualifications

• Hands-on experience in Information Security GRC within a technology-led or cloud-first organization.
• Working knowledge of security control frameworks (NIST CSF, ISO 27001) and their application in modern engineering environments.
• Proven ability to coordinate across the Three Lines of Defence, translating audit and compliance requirements into actionable tasks.
• Excellent communication skills to explain governance requirements to both technical and non-technical stakeholders.
• Organizational skills to manage multiple governance workstreams and track remediation effectively.
• A data-driven approach to compliance tracking, comfortable building dashboards and spotting trends.

Responsibilities

• Own the operational delivery of JET's governance framework, ensuring policies and controls are maintained.
• Run assurance processes that make security requirements practical for engineering and product teams.
• Act as the vital link between L1 engineering, L2 risk and compliance, and L3 audit, ensuring smooth control evidence flow and timely resolution of exceptions.

Skills

Information Security GRC

NIST CSF

ISO 27001

Three Lines of Defence

Communication skills

Dashboards / KPI

Job description

Just Eat Takeaway.com invites applications for an Operational Governance Lead within its Information Security organization. You will own the governance framework, ensuring policies and controls are maintained, and you will coordinate with L1, L2, and L3 stakeholders to maintain seamless control evidence flow.

You will run assurance processes, draft security standards for cloud platforms (AWS/GCP) and CI/CD pipelines, and track remediation with technical owners while building KPI dashboards for