Senior Manager InfoSec, Governance and Compliance

Takeaway.com; Amsterdam; Vor Ort; EUR 130.000 - 180.000; Vollzeit

Zusammenfassung

Just Eat Takeaway.com in Amsterdam seeks a Senior Manager, InfoSec, Governance and Compliance to lead our second-line-of-defence strategy within the Information Security team and align our security posture with global standards across markets.

You will mentor a team of governance specialists, drive ISO 27001, PCI-DSS, NIS2, and DORA programs, and partner with Legal, Data Protection, IT Risk, and Engineering to embed compliance into product and engineering workflows.

Qualifikationen

• Experience with GDPR, ISO 27001, NIS2, PCI-DSS and DORA.
• Ability to align security with business goals through partnerships.
• Strong leadership and coaching to deliver results.
• Deep knowledge of security governance, risk management, and controls.
• Experience managing external auditors, QSAs and cert bodies.

Aufgaben

• Implement and evolve information security governance framework, policies and standards.
• Mentor and manage a team of governance specialists.
• Lead global compliance programs (ISO 27001, PCI-DSS, NIS2, DORA).
• Communicate strategy and governance updates to directors and executives.
• Oversee information security risk assessments, risk register and monitoring.
• Embed regulatory requirements into engineering, product and procurement processes.
• Build cross-functional partnerships with Legal, Data Protection and IT Risk.
• Serve as primary contact for regulators, QSAs and auditors.
• Oversee governance and compliance project delivery.
• Define sub-function roadmaps and align with business goals.

Kenntnisse

Security governance

Risk management

Leadership

Stakeholder management

Regulatory compliance

ISO 27001

PCI-DSS

NIS2

DORA

CISM/CISSP/CISA/CRISC

Ausbildung

Professional certifications: CISM, CISSP, CISA, CRISC

Jobbeschreibung

Ready for a challenge? Then Just Eat Takeaway.com might be the place for you.

We’re a leading global online delivery platform, and our vision is to empower everyday convenience. Whether it’s a Friday-night feast, a post-gym poke bowl, or grabbing some groceries, our tech platform connects tens of millions of customers with hundreds of thousands of restaurant, grocery and convenience partners across the globe.

• Location: Amsterdam Office
• Category: Tech & Product
• Full time

About this role

As Senior Manager InfoSec, Governance and Compliance, you will lead our second-line-of-defence strategy within the Information Security team. You will play a pivotal role in aligning our security posture with global legal, regulatory, and industry standards across all markets. Guided by our values to lead, deliver, and care, you will collaborate with Director-level stakeholders, C-level executives, and cross-functional partners. In this role, your leadership will support a customer-centric approach, empowering teamwork to deliver robust security governance and keep our global platform secure.

These are some of the key components to the position:

• Implement and evolve JET’s information security governance framework, policies, and standards to aim high and drive excellence.
• Manage and mentor a team of governance specialists, helping one another succeed through close collaboration.
• Lead the global compliance and certification programmes (including ISO 27001, PCI-DSS, NIS2, and DORA) across all active markets.
• Communicate security strategy, risks, and governance updates to Director-level stakeholders, C-level executives, and the Risk Committee.
• Oversee the end-to-end information security risk assessment programme, risk register, and control effectiveness monitoring.
• Embed regulatory and security compliance requirements directly into engineering, product delivery, and procurement processes.
• Build strong collaborative partnerships across Legal, Data Protection, IT Risk, and Engineering teams to simplify complex requirements.
• Act as the primary point of contact for regulatory bodies, certification agencies, external QSAs, and external auditors.
• Oversee the delivery of governance and compliance projects, encouraging innovative and realistic problem-solving.
• Define sub-function roadmaps, manage team budgets, and align security governance with broader business ambitions.

What will you bring to the team?

• Comprehensive expertise in security frameworks and regulations (GDPR, ISO 27001, NIS2, PCI-DSS, DORA).
• Proven capability to develop a deep understanding of internal and external partners to align security with business goals.
• Strong leadership and coaching abilities to stay committed to achieving goals while fostering an inclusive team environment.
• High level of expertise in security governance principles, risk management methodologies, and control frameworks.
• Ability to aim higher to drive excellence across complex, multi-jurisdictional compliance environments.
• Professional certifications relevant to the role (e.g., CISM, CISSP, CISA, or CRISC).
• Strong communication and stakeholder management skills to influence at Director and executive levels.
• Mindset focused on acting responsibly while making a lasting impact on our global security posture.
• Sound understanding of networking, IT infrastructure, penetration testing oversight, and vulnerability analysis.
• Experience managing external auditor, QSA, and certification body relationships effectively.

At JET, this is how we play

Our teams forge connections internally and work with some of the best-known brands on the planet, giving us truly international impact in a dynamic environment.

Fun, fast-paced and supportive, the JET culture is about movement, growth, helping one another to succeed and celebrating wins. By truly living our values and embodying our behaviours, we’re building a customer-first culture which enables us to stay one step ahead of the competition.