deliveroo - Senior Information Security Specialist

• You have 6+ years of experience in GRC, security compliance, technology risk, privacy compliance, IT audit, or a related field, preferably in a global technology, marketplace, SaaS, fintech or payments environment. • You have managed or materially contributed to a global compliance framework or security/privacy compliance management program. • You have built, operated or significantly improved a compliance change management, obligations management, control mapping or regulatory-change process. • You have hands-on experience facilitating risk assessments, compliance risk workshops, control self-assessments and remediation planning with cross-functional stakeholders. • You have strong working knowledge of security and privacy frameworks such as ISO 27001, SOC 2, GDPR or CCPA, and you can quickly assess applicability of new frameworks or regulatory requirements. • You understand how security and privacy controls operate in modern technology environments, including cloud infrastructure, identity and access management, SDLC, incident response, vendor risk, data governance and business continuity. • You can translate legal, regulatory and framework requirements into clear, tangible control specifications to engineers and explain technical risk in business terms. • You communicate clearly, write with precision and can create high-quality policies, procedures, risk memos, control narratives, executive updates, and decision records. • You are comfortable navigating ambiguity, balancing multiple priorities and driving outcomes without relying on constant direction. • You build trust with technical and non-technical stakeholders and can facilitate conversations rather than dictate outcomes.