Global InfoSec Governance & Compliance Lead

Takeaway.com; Amsterdam; On-site; EUR 130,000 - 180,000; Full time

Job summary

Just Eat Takeaway.com in Amsterdam seeks a Senior Manager, InfoSec, Governance and Compliance to lead our second-line-of-defence strategy within the Information Security team and align our security posture with global standards across markets.

You will mentor a team of governance specialists, drive ISO 27001, PCI-DSS, NIS2, and DORA programs, and partner with Legal, Data Protection, IT Risk, and Engineering to embed compliance into product and engineering workflows.

Qualifications

• Experience with GDPR, ISO 27001, NIS2, PCI-DSS and DORA.
• Ability to align security with business goals through partnerships.
• Strong leadership and coaching to deliver results.
• Deep knowledge of security governance, risk management, and controls.
• Experience managing external auditors, QSAs and cert bodies.

Responsibilities

• Implement and evolve information security governance framework, policies and standards.
• Mentor and manage a team of governance specialists.
• Lead global compliance programs (ISO 27001, PCI-DSS, NIS2, DORA).
• Communicate strategy and governance updates to directors and executives.
• Oversee information security risk assessments, risk register and monitoring.
• Embed regulatory requirements into engineering, product and procurement processes.
• Build cross-functional partnerships with Legal, Data Protection and IT Risk.
• Serve as primary contact for regulators, QSAs and auditors.
• Oversee governance and compliance project delivery.
• Define sub-function roadmaps and align with business goals.

Skills

Security governance

Risk management

Leadership

Stakeholder management

Regulatory compliance

ISO 27001

PCI-DSS

NIS2

DORA

CISM/CISSP/CISA/CRISC

Education

Professional certifications: CISM, CISSP, CISA, CRISC

Job description

Just Eat Takeaway.com in Amsterdam seeks a Senior Manager, InfoSec, Governance and Compliance to lead our second-line-of-defence strategy within the Information Security team and align our security posture with global standards across markets.

You will mentor a team of governance specialists, drive ISO 27001, PCI-DSS, NIS2, and DORA programs, and partner with Legal, Data Protection, IT Risk, and Engineering to embed compliance into product and engineering workflows.