Just Eat Takeaway.com logo

Senior Manager InfoSec, Governance and Compliance

Just Eat Takeaway.com

Amsterdam
Full-time
10+ years experience
On-site

Key Skills

Information Security Governance
Risk Management
Compliance Management
ISO 27001
PCI-DSS
NIS2
DORA
GDPR
Stakeholder Management
Team Leadership
Security Strategy
Vulnerability Analysis
Auditor Management
Control Frameworks
Regulatory Compliance
IT Infrastructure

Job Description

Ready for a challenge? Then Just Eat Takeaway.com might be the place for you. 

We’re a leading global online delivery platform, and our vision is to empower everyday convenience. Whether it’s a Friday-night feast, a post-gym poke bowl, or grabbing some groceries, our tech platform connects tens of millions of customers with hundreds of thousands of restaurant, grocery and convenience partners across the globe.


About this role 

As Senior Manager InfoSec Governance & Compliance, you will lead our second-line-of-defence strategy within the Information Security team. You will play a pivotal role in aligning our security posture with global legal, regulatory, and industry standards across all markets. Guided by our values to lead, deliver, and care, you will collaborate with Director-level stakeholders, C-level executives, and cross-functional partners. In this role, your leadership will support a customer-centric approach, empowering teamwork to deliver robust security governance and keep our global platform secure.


These are some of the key components to the position:

  • Implement and evolve JET’s information security governance framework, policies, and standards to aim high and drive excellence.
  • Manage and mentor a team of governance specialists, helping one another succeed through close collaboration.
  • Lead the global compliance and certification programmes (including ISO 27001, PCI-DSS, NIS2, and DORA) across all active markets.
  • Communicate security strategy, risks, and governance updates to Director-level stakeholders, C-level executives, and the Risk Committee.
  • Oversee the end-to-end information security risk assessment programme, risk register, and control effectiveness monitoring.
  • Embed regulatory and security compliance requirements directly into engineering, product delivery, and procurement processes.
  • Build strong collaborative partnerships across Legal, Data Protection, IT Risk, and Engineering teams to simplify complex requirements.
  • Act as the primary point of contact for regulatory bodies, certification agencies, external QSAs, and external auditors.
  • Oversee the delivery of governance and compliance projects, encouraging innovative and realistic problem-solving.
  • Define sub-function roadmaps, manage team budgets, and align security governance with broader business ambitions.

What will you bring to the team?

  • Comprehensive expertise in security frameworks and regulations (GDPR, ISO 27001, NIS2, PCI-DSS, DORA).
  • Proven capability to develop a deep understanding of internal and external partners to align security with business goals.
  • Strong leadership and coaching abilities to stay committed to achieving goals while fostering an inclusive team environment.
  • High level of expertise in security governance principles, risk management methodologies, and control frameworks.
  • Ability to aim higher to drive excellence across complex, multi-jurisdictional compliance environments.
  • Professional certifications relevant to the role (e.g., CISM, CISSP, CISA, or CRISC).
  • Strong communication and stakeholder management skills to influence at Director and executive levels.
  • Mindset focused on acting responsibly while making a lasting impact on our global security posture.
  • Sound understanding of networking, IT infrastructure, penetration testing oversight, and vulnerability analysis.
  • Experience managing external auditor, QSA, and certification body relationships effectively.

At JET, this is how we play 

Our teams forge connections internally and work with some of the best-known brands on the planet, giving us truly international impact in a dynamic environment. Being the best at what we do isn’t just about delivering on our strategy. It's a competition for something incredibly valuable – our customers' choice. Every time a customer decides where to order, they're picking a side.

At the heart of the JET Customer League are our values and behaviours. They guide every interaction, every decision, every innovation. These are the actions we need to perform consistently and brilliantly, to surpass the competition and earn our customers’ loyalty, again and again.


Fun, fast-paced and supportive, the JET culture is about movement, growth, helping one another to succeed and celebrating wins. By truly living our values and embodying our behaviours, we’re building a customer-first culture which enables us to stay one step ahead of the competition. 


Inclusion, Diversity & Belonging

No matter who you are, what you look like, who you love, or where you are from, you can find your place at Just Eat Takeaway.com. We’re committed to creating an inclusive culture, encouraging diversity of people and thinking, in which all employees feel they truly belong and can bring their most colourful selves to work every day. 


What else are we delivering? Want to know more about our JETers, culture or company? Have a look at our career site where you can find people's stories, blogs, podcasts and more JET journeys.


Are you ready to join the team? Apply now!
#LI-SK1


Core Responsibilities

You will lead the second-line-of-defence strategy for information security, ensuring alignment with global legal, regulatory, and industry standards. This involves managing governance frameworks, overseeing risk assessment programs, and collaborating with executive leadership to maintain a secure platform.

Requirements

The role requires comprehensive expertise in security frameworks such as ISO 27001, GDPR, and NIS2, along with strong leadership and stakeholder management skills. Candidates should possess relevant professional certifications like CISM, CISSP, CISA, or CRISC and have experience managing external auditor relationships.

About Just Eat Takeaway.com

Industry: Software Development

Company size: 10,001+ employees

Just Eat Takeaway.com (JET) is a global leader in on-demand delivery headquartered in Amsterdam. In our seamless ecosystem, we connect partners with AI-first technology to scale, offer couriers the flexibility and opportunities they need, while consumers experience the freedom to stay just where they are. The company leverages data intelligence to power smarter logistics and connect 362,000 partners with millions of users worldwide to deliver hyper-local hyper-personalised experiences. Operating across 14 countries, Just Eat Takeaway.com is committed to sustainable, tech-led growth, raising the bar on execution and leveraging the strength of the Prosus ecosystem. For our latest career opportunities: https://careers.justeattakeaway.com

Added Today