GRC Engineer

<div class="content-intro"><p><strong>Our Global Structure</strong></p> <p><br>Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team.</p></div><h3><strong>About the Team</strong></h3> <p>At Deliveroo we’re striving to build London’s best and most admired Security Engineering organisation as part of our global team based across North America and Europe.</p> <p>Our London based Security Engineering team is looking for a <em>Senior GRC Engineer. </em>You will be a part of our inclusive, collaborative global team responsible.</p> <p>This is a London based position reporting directly to the Security Compliance Manager based in London.</p> <h3><strong>About the Role</strong></h3> <p>We're hiring a <em>Senior GRC Engineer</em><strong> </strong>to help take DoorDash's compliance program from something people run to something the platform runs on its own. You'll take primary ownership of how regulatory and framework change gets tracked, interpreted, and turned into real controls - one part of a broader GRC function that spans audit, policy, and risk. Day to day, that means less time updating spreadsheets and more time writing the automation, integrations, and control logic that let audit evidence collect itself. </p> <p>You'll also lead major external audits from start to finish and help shape the policies and control standards the rest of the program is built on.</p> <p>This is a hands-on role for someone who already has deep audit and assurance experience, wants to spend more time building than briefing and can move a program forward, and change how people work, without needing the title to make it happen.</p> <h3><strong>You’re excited about this opportunity because you will…</strong></h3> <ul> <li>Build the regulatory and framework change-management process that keeps DoorDash ahead of new obligations, instead of reacting to them.</li> <li>Move manual, point-in-time compliance work onto Compliance-as-Code foundations: policy-as-code, automated control testing, and continuous evidence collection wired into CI/CD, so audit readiness holds up between audits, not just during them.</li> <li>Design and run agentic workflows for evidence analysis, control testing, and audit response preparation, with a human in the loop where assurance demands it.</li> <li>Partner directly with engineering and architecture teams to design controls into new systems at build time and translate that technical work into the narratives auditors actually need.</li> <li>Partner with the Security Compliance Manager to shape and mature the global compliance program. </li> <li>Design, implement and validate security controls relevant to DoorDash’s regulatory environment, not just document them.</li> <li>Support development and refinement of security policies, standards, and guidance. </li> <li>Mentor other members of the compliance team and help set the technical bar the rest of the function grows into.</li> <li>Ensure policies are actionable, testable, and aligned to real-world controls. </li> </ul> <h3><strong>We’re excited about you because you have…</strong></h3> <ul> <li>6+ years of experience in security compliance, GRC or technology risk, with a strong track record in high-growth, technology-driven and regulated environments. </li> <li>Hands-on experience building large language models and agent workflows with daily use of AI in your own work, grounded judgment on what to delegate to agents versus what needs a human, and the ability to evidence both to an auditor. DoorDash is an AI-forward organization and the ability to optimize efficiency using AI is crucial in this role.</li> <li>The ideal candidate brings hands-on experience with frameworks such as DORA, the EU AI Act, NIS2 and CRA. </li> <li>Real, hands-on experience implementing and assessing controls against frameworks like PCI DSS, SOC 2, ISO 27001 - not just reading them.</li> <li>Demonstrated ability to identify control gaps, assess risk and drive remediation in partnership with cross-functional stakeholders. </li> <li>Experience developing, implementing and improving security policies, standards, and procedures, ensuring they are operational and effective.</li> <li>Strong understanding of compliance metrics and reporting, with the ability to track control effectiveness, audit outcomes, and risk exposure. </li> <li>Ability to influence and drive accountability across technical and non-technical stakeholders. </li> <li>Excellent verbal and written communication skills, with the ability to translate complex audit and compliance requirements into clear, actionable guidance. </li> <li>Comfort owning compliance metrics and reporting - you can show, not just assert, that a program is working.</li> <li>Bachelor’s degree in Information Security, Computer Science, or related field, or equivalent practical experience. </li> </ul> <h3><strong>About DoorDash</strong></h3> <p>DoorDash is a technology company that connects customers with their favorite local and national businesses in over 4,000 cities and all 50 states across the United States and Canada. Founded in 2013, DoorDash empowers merchants to grow their businesses by offering on-demand delivery, data-driven insights, and better in-store efficiency, providing delightful experiences from door to door. By building the last-mile delivery infrastructure for local cities, DoorDash is bringing communities closer, one doorstep at a time. Read more on the <a href="https://blog.doordash.com/">DoorDash blog</a> or at <a href="http://www.doordash.com">www.doordash.com</a>. </p> <h3><strong>Our Commitment to Diversity and Inclusion</strong></h3> <p>We’re committed to growing and empowering a more inclusive community within our company, industry, and cities. That’s why we hire and cultivate diverse teams of the best and brightest from all backgrounds, experiences, and perspectives. We believe that true innovation happens when everyone has room at the table and the tools, resources, and opportunity to excel. </p><div class="content-conclusion"><p><strong>Diversity, Equity and Inclusion</strong><br><br>At Deliveroo, we know that a great workplace reflects the world around us and that true diversity and inclusion make us stronger, more creative, and better at what we do. We’re committed to fostering an environment where everyone can do their best work and feel they belong.</p> <p>We believe in equality of opportunity and welcome candidates from all backgrounds regardless of age, gender, ethnicity, disability, sexual orientation, gender identity, socio-economic background, religion, or belief.</p> <p>If you have a disability or long-term health condition and need support to apply for one of our roles, or require any reasonable adjustments during the recruitment process, you’ll have the opportunity to let us know once you’ve submitted your application. We’ll share details on how to request support so we can ensure you have a fair and equitable experience.</p> <p>If you’re excited about making a real impact in a fast-moving marketplace and growing your career alongside ambitious, supportive teams, we’d love to hear from you!</p> <p><em data-renderer-mark="true"><br>Beware of recruitment scams: DASH Brands will never ask you to pay money or share sensitive financial information during hiring — learn more about DASH Brands' legitimate recruiting process at</em> <a class="_ymio1r31 _ypr0glyw _zcxs1o36 _mizu194a _1ah3dkaa _ra3xnqa1 _128mdkaa _1cvmnqa1 _4davt94y _4bfu18uv _1hms8stv _ajmmnqa1 _vchhusvi _kqswh2mm _2rkolb4i _ect4ttxp _syaz13af _1a3b18uv _4fpr8stv _5goinqa1 _f8pj13af _9oik18uv _1bnxglyw _jf4cnqa1 _30l313af _1nrm18uv _c2waglyw _1iohnqa1 _9h8h12zz _10531ra0 _1ien1ra0 _n0fx1ra0 _1vhv17z1" href="http://careersatdoordash.com/recruitment-scam-awareness" data-renderer-mark="true" data-is-router-link="false" data-testid="link-with-safety"><em data-renderer-mark="true">careersatdoordash.com/recruitment-scam-awareness</em></a><em data-renderer-mark="true">.</em></p></div>