Deliveroo - GRC Engineer

• Real, hands-on experience implementing and assessing controls against frameworks like PCI DSS, SOC 2, ISO 27001 - not just reading them. • Demonstrated ability to identify control gaps, assess risk and drive remediation in partnership with cross-functional stakeholders. • Experience developing, implementing and improving security policies, standards, and procedures, ensuring they are operational and effective. • Strong understanding of compliance metrics and reporting, with the ability to track control effectiveness, audit outcomes, and risk exposure. • Ability to influence and drive accountability across technical and non-technical stakeholders. • Excellent verbal and written communication skills, with the ability to translate complex audit and compliance requirements into clear, actionable guidance. • Comfort owning compliance metrics and reporting - you can show, not just assert, that a program is working. • Bachelor’s degree in Information Security, Computer Science, or related field, or equivalent practical experience.