Description
Deliveroo, now part of DoorDash, is seeking a Senior GRC Engineer to join their London-based Security Engineering team.
The successful candidate will be responsible for taking DoorDash's compliance program to the next level, making it a platform that runs on its own. This involves tracking regulatory and framework changes, interpreting them, and turning them into real controls. The ideal candidate will have experience in building large language models and agent workflows, as well as hands-on experience with frameworks such as DORA, the EU AI Act, NIS2, and CRA.
Key responsibilities include:
- Building the regulatory and framework change-management process
- Moving manual compliance work onto Compliance-as-Code foundations
- Designing and running agentic workflows for evidence analysis and control testing
- Partnering with engineering and architecture teams to design controls into new systems
- Leading major external audits from start to finish
- Shaping and maturing the global compliance program
Requirements:
- 6+ years of experience in security compliance, GRC, or technology risk
- Hands-on experience building large language models and agent workflows
- Experience with frameworks such as DORA, the EU AI Act, NIS2, and CRA
- Real, hands-on experience implementing and assessing controls against frameworks like PCI DSS, SOC 2, ISO 27001
- Demonstrated ability to identify control gaps, assess risk, and drive remediation
The company offers a collaborative and inclusive environment, with a commitment to diversity and inclusion.