Security GRC Lead: Operational Governance

Just Eat Takeaway.com; Ewell; On-site; GBP 90,000 - 130,000; Full time

Job summary

Just Eat Takeaway.com in London is seeking an Operational Governance Lead to own the operational delivery of governance, policies and controls within the InfoSec function. You will align risk and compliance activities with engineering and product teams, ensuring evidence flows and exceptions are resolved.

You will build dashboards, coordinate audit cycles, and draft security standards for cloud platforms (AWS/GCP), CI/CD pipelines, and third-party integrations, while keeping the governance

Qualifications

• Hands-on Information Security GRC experience in a tech-led or cloud-first org.
• Knowledge of security control frameworks (NIST CSF, ISO 27001) and their application to modern engineering (cloud, microservices, DevOps).
• Ability to coordinate across the Three Lines of Defence translating audit and compliance into actionable tasks for engineering teams.
• Clear communicator who explains governance requirements to technical and non-technical stakeholders.
• Organised and delivery-focused, able to manage multiple governance workstreams.
• Data-driven approach to compliance tracking with dashboards and trends.

Responsibilities

• Maintain and operationalise governance documentation, standards, and control models aligned to risk appetite.
• Run governance forums and working groups; document, track, and communicate decisions.
• Coordinate evidence gathering and control validation across L1/L2 and audit cycles.
• Draft and refine technical security standards for cloud platforms (AWS/GCP), CI/CD, and third-party integrations.
• Track exceptions and remediation plans, escalating risks when needed.
• Build and maintain KPI/KRI dashboards for visibility into control health and compliance posture.

Skills

InfoSec GRC

NIST CSF

ISO 27001

Cloud security

DevOps security

Stakeholder comms

Risk & compliance

Job description

Just Eat Takeaway.com in London is seeking an Operational Governance Lead to own the operational delivery of governance, policies and controls within the InfoSec function. You will align risk and compliance activities with engineering and product teams, ensuring evidence flows and exceptions are resolved.

You will build dashboards, coordinate audit cycles, and draft security standards for cloud platforms (AWS/GCP), CI/CD pipelines, and third-party integrations, while keeping the governance