GRC Engineer

About the role

Our Global Structure

Deliveroo is now part of DoorDash, bringing together teams with even greater reach, scale, and ambition. Depending on your role, you may collaborate with teammates, systems, and leaders across DoorDash and Wolt. Together, we’re unlocking new possibilities as one global team.

About the Team

At Deliveroo we’re striving to build London’s best and most admired Security Engineering organisation as part of our global team based across North America and Europe.

Our London based Security Engineering team is looking for a Senior GRC Engineer. You will be a part of our inclusive, collaborative global team responsible.

This is a London based position reporting directly to the Security Compliance Manager based in London.

About the Role

We're hiring a Senior GRC Engineer to help take DoorDash's compliance program from something people run to something the platform runs on its own. You'll take primary ownership of how regulatory and framework change gets tracked, interpreted, and turned into real controls - one part of a broader GRC function that spans audit, policy, and risk. Day to day, that means less time updating spreadsheets and more time writing the automation, integrations, and control logic that let audit evidence collect itself.

You'll also lead major external audits from start to finish and help shape the policies and control standards the rest of the program is built on.

This is a hands-on role for someone who already has deep audit and assurance experience, wants to spend more time building than briefing and can move a program forward, and change how people work, without needing the title to make it happen.

You’re excited about this opportunity because you will…

- Build the regulatory and framework change-management process that keeps DoorDash ahead of new obligations, instead of reacting to them.

- Move manual, point-in-time compliance work onto Compliance-as-Code foundations: policy-as-code, automated control testing, and continuous evidence collection wired into CI/CD, so audit readiness holds up between audits, not just during them.

- Design and run agentic workflows for evidence analysis, control testing, and audit response preparation, with a human in the loop where assurance demands it.

- Partner directly with engineering and architecture teams to design controls into new systems at build time and translate that technical work into the narratives auditors actually need.

- Partner with the Security Compliance Manager to shape and mature the global compliance program.

- Design, implement and validate security controls relevant to DoorDash’s regulatory environment, not just document them.

- Support development and refinement of security policies, standards, and guidance.

- Mentor other members of the compliance team and help set the technical bar the rest of the function grows into.