Senior GRC Engineer — Automation & Audit Lead

Deliveroo; Greater London; On-site; GBP 90,000 - 140,000; Full time

Job summary

Deliveroo is seeking a Senior GRC Engineer to own the compliance program, track regulatory changes, and turn them into automated controls across our platform. You will lead major external audits, shape policy and control standards, and partner with engineering to embed compliance into system design.

This London-based role requires hands-on audit experience, knowledge of frameworks like PCI DSS, SOC 2, ISO 27001, and a proven ability to drive remediation with cross-functional teams.

Qualifications

• Experience building and running compliance programs in regulated environments.
• Hands-on audits, risk assessments and remediation with cross-functional teams.
• Ability to translate complex regulatory requirements into actionable controls.

Responsibilities

• Lead audits from initiation to completion and liaison with external auditors.
• Design and implement controls aligned to regulatory frameworks across platforms.
• Develop policies, standards, and guidance; track control effectiveness.
• Partner with engineering and architecture to bake compliance into build processes.
• Measure compliance metrics and report risk exposure to stakeholders.

Skills

Security compliance

GRC

Risk management

Audit readiness

Policy development

CI/CD automation

AI in security

Stakeholder engagement

Education

Bachelor’s degree in Information Security

Computer Science or related field

Equivalent practical experience

Tools

PCI DSS

SOC 2

ISO 27001

DORA

EU AI Act

NIS2

CRA

Job description

Deliveroo is seeking a Senior GRC Engineer to own the compliance program, track regulatory changes, and turn them into automated controls across our platform. You will lead major external audits, shape policy and control standards, and partner with engineering to embed compliance into system design.

This London-based role requires hands-on audit experience, knowledge of frameworks like PCI DSS, SOC 2, ISO 27001, and a proven ability to drive remediation with cross-functional teams.