SECURITY COMPLIANCE SPECIALIST

Hybrid requirements: This role has flexible working patterns. At Deliveroo, our mission is to build the definitive food company by transforming how our customers eat, making food more convenient and accessible. To Achieve this, we prioritise security to protect the data and money of our customers, employees, partners, riders, and investors. As a technology-driven leader in a rapidly expanding industry, we value autonomy, ownership, and innovation. Our small team makes a significant impact, tackling some of the most intriguing challenges out there. We are seeking a pragmatic and motivated Security Compliance Specialist with a solid understanding of security policies, standards, awareness and compliance. In this hands-on role, you will support the development, implementation, and compliance monitoring of our information security policy suite. You will work on a variety of security policy implementation projects, directly influencing how Deliveroo operates securely, and engaging with stakeholders across the business to drive higher maturity. What You’ll Be Doing: Develop and implement information security policies, standards, and guidance in collaboration with stakeholders. Ensure compliance with industry standards such as NIST CSF, PCI-DSS, ISO 27001, and SOC 2. Coordinate responses to internal and external audits and liaise with key stakeholders. Develop and deliver security policy awareness and training programs. Assess policy compliance, track risk exposure, and support continuous compliance initiatives. Produce management reports on security compliance and metrics for relevant committees. Requirements: Minimum 3 years of experience in information security, ideally in a public tech company or regulated industry. Experience in developing and implementing information security policies, standards and procedures. Familiarity with security standards such as NIST CSF, PCI-DSS, ISO 27001, and SOC2. Strong skills in security metrics and reporting. Ability to engage collaboratively with technical and non-technical stakeholders. Excellent written and verbal communication skills. Confidence in delivering awareness and training sessions. We’re also interested in… A mix of consulting and industry experience in a relevant role. Industry certification such as CISM, CRISC, CISO, or CISSP. See more