Operational Governance Lead in Loughton

Operational Governance Lead

Ready for a challenge? Then Just Eat Takeaway.com might be the place for you. We are a leading global online delivery platform, empowering everyday convenience by connecting millions of customers with thousands of partners worldwide.

About this role:JET's Information Security organisation protects a technology‑led, cloud‑native platform serving millions of customers across multiple markets. JET's Security Governance function sets the standards that keep a large, cloud‑native technology organisation secure and compliant. As Operational Governance Lead, you will own the operational delivery of JET's governance framework, maintaining policies and controls, running assurance processes, and ensuring security requirements work in practice for engineering and product teams. You act as the day‑to‑day connective tissue between L1 engineering, L2 risk and compliance, and L3 audit, ensuring control evidence flows cleanly and exceptions are resolved.

Key Components

• Maintain and operationalise JET's security governance documentation, policies, standards, and control models, keeping them aligned to JET's risk appetite and frameworks including NIST CSF and ISO 27001.
• Run governance forums and working groups, ensuring decisions are documented, tracked, and communicated to engineering, risk, and compliance stakeholders in a timely way.
• Coordinate evidence gathering and control validation across L1, L2, supporting audit cycles and maintaining a clear, accountable control registry.
• Draft and refine technical security standards for cloud platforms (AWS/GCP), CI/CD pipelines, and third‑party integrations, working with Engineering Leads to embed these into delivery workflows.
• Track exceptions and remediation plans with technical owners, escalating risks where needed and maintaining visibility across the Three Lines of Defence.
• Build and maintain KPI/KRI dashboards that provide stakeholders with clear, accurate visibility of control health and compliance posture.

Qualifications

• Solid hands‑on experience in Information Security GRC within a technology‑led or cloud‑first organisation, with a track record of keeping governance frameworks operational at pace.
• Working knowledge of security control frameworks (NIST CSF, ISO 27001) and how they apply to modern engineering environments including cloud infrastructure, microservices, and DevOps.
• Proven ability to coordinate across the Three Lines of Defence, translating audit and compliance requirements into clear, actionable tasks for engineering teams without creating unnecessary friction.
• Clear communicator who can explain governance requirements and control expectations to both technical engineers and non‑technical risk or business stakeholders.
• Organised and delivery‑focused, with the ability to manage multiple governance workstreams, track remediation through to closure, and keep processes running in a fast‑moving organisation.
• Data‑driven approach to compliance tracking, comfortable building dashboards, spotting trends in control data, and surfacing the right information to support leadership decisions.

Inclusion, Diversity & Belonging

No matter who you are, what you look like, who you love, or where you are from, you can find your place at Just Eat Takeaway.com. We’re committed to creating an inclusive culture, encouraging diversity of people and thinking, in which all employees feel they truly belong and can bring their most colourful selves to work every day.