Senior Manager InfoSec, Governance and Compliance

Just Eat Holding; Amsterdam; On-site; EUR 140,000 - 190,000; Full time

Job summary

Just Eat Takeaway.com is seeking a Senior Manager InfoSec Governance & Compliance to lead the second line of defence for information security. You will drive governance, risk management, and regulatory alignment across markets, coordinating with executives and cross-functional partners to safeguard the platform.

You will oversee major standards like GDPR, ISO 27001, NIS2, PCI-DSS, and DORA, mentor a team of specialists, and partner with Legal, IT Risk, and Engineering to embed compliance into

Qualifications

• Comprehensive expertise in GDPR, ISO 27001, NIS2, PCI-DSS, DORA.
• Proven ability to align security with business goals.
• Strong leadership and coaching abilities to foster an inclusive team environment.
• Deep understanding of governance frameworks, risk management, and control frameworks.
• Experience coordinating with external auditors and certification bodies.

Responsibilities

• Lead the second-line-of-defense security governance and compliance strategy.
• Manage and mentor a team of governance specialists.
• Oversee global compliance programs including ISO 27001, PCI-DSS, NIS2, and DORA.
• Communicate security strategy and governance updates to directors, C-levels, and Risk Committee.
• Oversee end-to-end information security risk assessments and risk register maintenance.
• Embed regulatory requirements into engineering, product, and procurement processes.
• Collaborate with Legal, Data Protection, IT Risk, and Engineering teams.
• Serve as primary contact for regulators, QSAs, and auditors.
• Define roadmaps, manage budgets, and align governance with business goals.

Skills

Security governance

Regulatory compliance

Leadership

Stakeholder management

Risk assessment

Education

Bachelor's degree in Information Security or related

Tools

ISO 27001

PCI-DSS

NIS2

DORA

Job description

Ready for a challenge? Then Just Eat Takeaway.com might be the place for you.

We're a leading global online delivery platform, and our vision is to empower everyday convenience. Whether it's a Friday-night feast, a post-gym poke bowl, or grabbing some groceries, our tech platform connects tens of millions of customers with hundreds of thousands of restaurant, grocery and convenience partners across the globe.

About this role

As Senior Manager InfoSec Governance & Compliance, you will lead our second-line-of-defence strategy within the Information Security team. You will play a pivotal role in aligning our security posture with global legal, regulatory, and industry standards across all markets. Guided by our values to lead, deliver, and care , you will collaborate with Director-level stakeholders, C-level executives, and cross-functional partners. In this role, your leadership will support a customer-centric approach, empowering teamwork to deliver robust security governance and keep our global platform secure.

Key components to the position

• Implement and evolve JET's information security governance framework, policies, and standards to aim high and drive excellence .
• Manage and mentor a team of governance specialists, helping one another succeed through close collaboration .
• Lead the global compliance and certification programmes (including ISO 27001, PCI-DSS, NIS2, and DORA) across all active markets.
• Communicate security strategy, risks, and governance updates to Director-level stakeholders, C-level executives, and the Risk Committee.
• Oversee the end-to-end information security risk assessment programme, risk register, and control effectiveness monitoring.
• Embed regulatory and security compliance requirements directly into engineering, product delivery, and procurement processes.
• Build strong collaborative partnerships across Legal, Data Protection, IT Risk, and Engineering teams to simplify complex requirements.
• Act as the primary point of contact for regulatory bodies, certification agencies, external QSAs, and external auditors.
• Oversee the delivery of governance and compliance projects, encouraging innovative and realistic problem-solving.
• Define sub-function roadmaps, manage team budgets, and align security governance with broader business ambitions.

What will you bring to the team?

• Comprehensive expertise in security frameworks and regulations (GDPR, ISO 27001, NIS2, PCI-DSS, DORA).
• Proven capability to develop a deep understanding of internal and external partners to align security with business goals.
• Strong leadership and coaching abilities to stay committed to achieving goals while fostering an inclusive team environment.
• High level of expertise in security governance principles, risk management methodologies, and control frameworks.
• Ability to aim higher to drive excellence across complex, multi-jurisdictional compliance environments.
• Professional certifications relevant to the role (e.g., CISM, CISSP, CISA, or CRISC).
• Strong communication and stakeholder management skills to influence at Director and executive levels.
• Mindset focused on acting responsibly while making a lasting impact on our global security posture.
• Sound understanding of networking, IT infrastructure, penetration testing oversight, and vulnerability analysis.
• Experience managing external auditor, QSA, and certification body relationships effectively.

At JET, this is how we play

Our teams forge connections internally and work with some of the best-known brands on the planet, giving us truly international impact in a dynamic environment. Being the best at what we do isn't just about delivering on our strategy. It's a competition for something incredibly valuable - our customers' choice. Every time a customer decides where to order, they're picking a side.

At the heart of the JET Customer League are our values and behaviours. They guide every interaction, every decision, every innovation. These are the actions we need to perform consistently and brilliantly, to surpass the competition and earn our customers' loyalty, again and again.

Fun, fast-paced and supportive, the JET culture is about movement, growth, helping one another to succeed and celebrating wins. By truly living our values and embodying our behaviours, we're building a customer-first culture which enables us to stay one step ahead of the competition.

Inclusion, Diversity & Belonging

No matter who you are, what you look like, who you love, or where you are from, you can find your place at Just Eat Takeaway.com. We're committed to creating an inclusive culture, encouraging diversity of people and thinking, in which all employees feel they truly belong and can bring their most colourful selves to work every day.

What else are we delivering? Want to know more about our JETers, culture or company? Have a look at our career site where you can find people's stories, blogs, podcasts and more JET journeys.