About this role
As Senior Manager InfoSec Governance & Compliance, you will lead our second-line-of-defence strategy within the Information Security team. You will play a pivotal role in aligning our security posture with global legal, regulatory, and industry standards across all markets. Guided by our values to lead, deliver, and care, you will collaborate with Director-level stakeholders, C-level executives, and cross-functional partners. In this role, your leadership will support a customer-centric approach, empowering teamwork to deliver robust security governance and keep our global platform secure.
These are some of the key components to the position:
•Implement and evolve JET's information security governance framework, policies, and standards to aim high and drive excellence.
•Manage and mentor a team of governance specialists, helping one another succeed through close collaboration.
•Lead the global compliance and certification programmes (including ISO 27001, PCI-DSS, NIS2, and DORA) across all active markets.
•Communicate security strategy, risks, and governance updates to Director-level stakeholders, C-level executives, and the Risk Committee.
•Oversee the end-to-end information security risk assessment programme, risk register, and control effectiveness monitoring.
•Embed regulatory and security compliance requirements directly into engineering, product delivery, and procurement processes.
•Build strong collaborative partnerships across Legal, Data Protection, IT Risk, and Engineering teams to simplify complex requirements.
•Act as the primary point of contact for regulatory bodies, certification agencies, external QSAs, and external auditors.
•Oversee the delivery of governance and compliance projects, encouraging innovative and realistic problem-solving.
•Define sub-function roadmaps, manage team budgets, and align security governance with broader business ambitions.
What will you bring to the team?
•Comprehensive expertise in security frameworks and regulations (GDPR, ISO 27001, NIS2, PCI-DSS, DORA).
•Proven capability to develop a deep understanding of internal and external partners to align security with business goals.
•Strong leadership and coaching abilities to stay committed to achieving goals while fostering an inclusive team environment.
•High level of expertise in security governance principles, risk management methodologies, and control frameworks.
•Ability to aim higher to drive excellence across complex, multi-jurisdictional compliance environments.
•Professional certifications relevant to the role (e.g., CISM, CISSP, CISA, or CRISC).
•Strong communication and stakeholder management skills to influence at Director and executive levels.
•Mindset focused on acting responsibly while making a lasting impact on our global security posture.
•Sound understanding of networking, IT infrastructure, penetration testing oversight, and vulnerability analysis.
•Experience managing external auditor, QSA, and certification body relationships effectively.
About the company
Just Eat Takeaway.com is a leading global online delivery platform. Its vision is to empower everyday convenience: the tech platform connects tens of millions of customers with hundreds of thousands of restaurant, grocery and convenience partners across the globe.
