Opportunity at
DeliverooGRC Engineer
Deliveroo, which is now part of DoorDash, is seeking a Senior GRC Engineer to join its London-based Security Engineering team. This position reports directly to the…
Career Tools
About This Role
Deliveroo, which is now part of DoorDash, is seeking a Senior GRC Engineer to join its London-based Security Engineering team. This position reports directly to the Security Compliance Manager in London and offers the chance to collaborate across DoorDash and Wolt. The employer operates as a technology company building last-mile delivery infrastructure that connects customers with local and national businesses. This hands-on role suits an experienced professional who wants to…
Job Description
Deliveroo, which is now part of DoorDash, is seeking a Senior GRC Engineer to join its London-based Security Engineering team. This position reports directly to the Security Compliance Manager in London and offers the chance to collaborate across DoorDash and Wolt. The employer operates as a technology company building last-mile delivery infrastructure that connects customers with local and national businesses.
This hands-on role suits an experienced professional who wants to shift compliance from manual tracking to automated systems. Responsibilities include building regulatory change-management processes, implementing Compliance-as-Code foundations, designing agentic workflows for audit responses, and managing external audits. The ideal candidate will spend less time on spreadsheets and more time creating integrations and control logic that allow audit evidence to collect automatically.
Responsibilities
- Build regulatory and framework change-management procedures to anticipate new obligations
- Transition manual tasks to Compliance-as-Code frameworks including policy-as-code and continuous evidence gathering in CI/CD pipelines
- Design and execute agentic workflows for evidence analysis, control testing, and audit preparation
- Collaborate with engineering and architecture units to incorporate controls during system creation
- Lead comprehensive external audits from beginning to end
- Design, implement, and validate security controls aligned with the regulatory environment
- Develop and improve security standards, guidelines, and policies
- Mentor compliance team members and establish technical benchmarks
- Monitor and report on compliance metrics, risk exposure, and audit outcomes
Requirements
- At least six years of professional background in technology risk, security compliance, or GRC within high-growth, regulated technology sectors
- Practical background building large language models and agent workflows with daily utilization of artificial intelligence
- Hands-on implementation and assessment experience with frameworks such as PCI DSS, SOC 2, and ISO 27001
- Experience identifying control gaps, evaluating risk, and leading remediation alongside cross-functional partners
- Ability to create and improve operational security policies, standards, and procedures
- Strong verbal and written communication abilities to explain compliance requirements clearly
Qualifications
- Bachelor degree in Computer Science, Information Security, or an equivalent related field, or comparable practical background
- Practical familiarity with frameworks including DORA, the EU AI Act, NIS2, and CRA
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is this job located?
This is a London-based position.
What is the employment type?
The posting specifies full-time employment.
What salary is offered for this role?
The job posting does not specify a salary.
Who does this role report to?
The position reports directly to the Security Compliance Manager based in London.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.