Senior Manager InfoSec, Governance and Compliance

Ready for a challenge? Then Just Eat Takeaway.com might be the place for you.

We’re a leading global online delivery platform, and our vision is to empower everyday convenience. Whether it’s a Friday-night feast, a post-gym poke bowl, or grabbing some groceries, our tech platform connects tens of millions of customers with hundreds of thousands of restaurant, grocery and convenience partners across the globe.

• Location: Amsterdam Office
• Category: Tech & Product
• Full time

About this role

As Senior Manager InfoSec, Governance and Compliance, you will lead our second-line-of-defence strategy within the Information Security team. You will play a pivotal role in aligning our security posture with global legal, regulatory, and industry standards across all markets. Guided by our values to lead, deliver, and care, you will collaborate with Director-level stakeholders, C-level executives, and cross-functional partners. In this role, your leadership will support a customer-centric approach, empowering teamwork to deliver robust security governance and keep our global platform secure.

These are some of the key components to the position:

• Implement and evolve JET’s information security governance framework, policies, and standards to aim high and drive excellence.
• Manage and mentor a team of governance specialists, helping one another succeed through close collaboration.
• Lead the global compliance and certification programmes (including ISO 27001, PCI-DSS, NIS2, and DORA) across all active markets.
• Communicate security strategy, risks, and governance updates to Director-level stakeholders, C-level executives, and the Risk Committee.
• Oversee the end-to-end information security risk assessment programme, risk register, and control effectiveness monitoring.
• Embed regulatory and security compliance requirements directly into engineering, product delivery, and procurement processes.
• Build strong collaborative partnerships across Legal, Data Protection, IT Risk, and Engineering teams to simplify complex requirements.
• Act as the primary point of contact for regulatory bodies, certification agencies, external QSAs, and external auditors.
• Oversee the delivery of governance and compliance projects, encouraging innovative and realistic problem-solving.
• Define sub-function roadmaps, manage team budgets, and align security governance with broader business ambitions.

What will you bring to the team?

• Comprehensive expertise in security frameworks and regulations (GDPR, ISO 27001, NIS2, PCI-DSS, DORA).
• Proven capability to develop a deep understanding of internal and external partners to align security with business goals.
• Strong leadership and coaching abilities to stay committed to achieving goals while fostering an inclusive team environment.
• High level of expertise in security governance principles, risk management methodologies, and control frameworks.
• Ability to aim higher to drive excellence across complex, multi-jurisdictional compliance environments.
• Professional certifications relevant to the role (e.g., CISM, CISSP, CISA, or CRISC).
• Strong communication and stakeholder management skills to influence at Director and executive levels.
• Mindset focused on acting responsibly while making a lasting impact on our global security posture.
• Sound understanding of networking, IT infrastructure, penetration testing oversight, and vulnerability analysis.
• Experience managing external auditor, QSA, and certification body relationships effectively.

At JET, this is how we play

Our teams forge connections internally and work with some of the best-known brands on the planet, giving us truly international impact in a dynamic environment.

Fun, fast-paced and supportive, the JET culture is about movement, growth, helping one another to succeed and celebrating wins. By truly living our values and embodying our behaviours, we’re building a customer-first culture which enables us to stay one step ahead of the competition.