Senior Information Security Specialist

Responsibilities

• Design and operate a global compliance change management framework to identify new security, privacy, and regulatory obligations.
• Maintain a structured view of the compliance landscape, including obligation inventories, control mappings, and remediation status.
• Lead compliance-impact assessments for new regulations, product launches, market expansions, and major technology initiatives.
• Facilitate compliance risk workshops with Engineering, Legal, Privacy, Product, and IT stakeholders.
• Translate complex regulatory and privacy requirements into practical, actionable control specifications for technical teams.
• Identify control gaps, assess residual risk, and define remediation plans with clear accountability.
• Support control mapping and harmonization across frameworks such as ISO 27001, SOC 2, NIST CSF, GDPR, and emerging AI governance requirements.

Requirements

• 6+ years of experience in GRC, security compliance, technology risk, privacy compliance, or IT audit.
• Proven experience managing or contributing to a global compliance framework within a technology, SaaS, or fintech environment.
• Hands-on experience facilitating risk assessments, compliance workshops, and remediation planning.
• Strong working knowledge of security and privacy frameworks including ISO 27001, SOC 2, GDPR, or CCPA.
• Understanding of how security controls operate in modern cloud infrastructure and identity management environments.
• Ability to translate legal and regulatory requirements into clear technical control specifications.
• Excellent communication skills with the ability to explain technical risk in business terms to executive stakeholders.

About the Company

Deliveroo is a technology-driven company transforming the way the world eats and shops. We are building a scalable and reliable delivery network that connects consumers, merchants, and riders, making access to food and products more convenient and enjoyable.