GRC Engineer

Ready for a challenge?

Then Just Eat Takeaway.com might be the place for you. We’re a leading global online delivery platform, and our vision is to empower everyday convenience. Whether it’s a Friday-night feast, a post-gym poke bowl, or grabbing some groceries, our tech platform connects tens of millions of customers with hundreds of thousands of restaurant, grocery and convenience partners across the globe.

About this role

We are looking for a skilled software engineer with basic internal control knowledge to build the AI agents running our control monitoring. In this engineering-first role, you will pair with experienced GRC and audit colleagues who translate regulatory expectations into specifications. Your focus is teamwork to deliver, turning those specifications into highly functional, robust production agents.

You will design AI agents that ingest signals from cloud platforms, identity providers, and CI/CD pipelines to deliver structured evidence. Over time, we will care for your growth, helping you naturally pick up the GRC vocabulary needed to scale your impact. We are looking for someone who has shipped production systems with LLMs and is excited to apply those skills to a highly scrutinized domain.

These are some of the key components to the position:

• Build AI agents that perform continuous control monitoring — ingesting logs and configuration data, reasoning over them with LLMs, and producing structured evidence about whether a given control is operating. This role will be part of the GRC team and working closely with the GRC team to understand what each control actually requires.

• Design the agent architecture end to end — tool definitions, retrieval over policy and control documentation, prompt and model versioning, evaluation harnesses, and the human review loop that sits in front of any agent conclusion that matters.

• Build the integrations that feed the agents — APIs and data pipelines for AWS / GCP / Azure logs, Okta, GitHub, Jira, CI/CD systems (like GitHub Actions), and our data warehouse. Most of the engineering effort lives here.

• Build the evaluation layer that lets us trust the agents — regression suites, golden datasets, drift detection, and clear logging of what the agent saw, what it concluded, and why. This is the part that makes the system defensible to auditors, and it is engineering work.

• Automate remediation and ticketing workflows where the agent identifies an exception, with sensible guardrails on what runs autonomously and what requires a human.

• Build dashboards and reporting that show control health to control owners and to our risk committees. Clean APIs, clean data models, useful visualisations.

• Work with our GRC colleagues so that what you build maps to what they need — they will own the framework interpretation; you will own the implementation.

• Be thoughtful about the AI risks in your own system — prompt injection, data leakage, hallucination, over-reliance. We expect engineering rigour here, not a separate compliance review.
   

What will you bring to the team?

• Strong Python skills with a track record of building, shipping, and maintaining production systems, backed by standard fundamentals (Git, testing, CI/CD, REST APIs, databases).

• Hands-on experience building and scaling non-prototype AI systems (RAG, agents, structured extraction) using frameworks (e.g., LangGraph, CrewAI) or raw APIs, plus exposure to LLM evaluation tooling (e.g., Braintrust, LangSmith).
• Practical experience with a major cloud platform (AWS, GCP, Azure) with the ability to confidently navigate IAM, pull logs, and analyze audit trails.
• Prior experience working within regulated environments, handling audits, or implementing policy-as-code/detection-as-code frameworks (e.g., OPA, Cedar).
• Ability to write exceptionally clear, plain-English documentation tailored to both technical engineers and non-technical auditors.
• Comfortable representing engineering in compliance discussions, translating complex audit findings, and demonstrating an open, fast-learning mindset.

At JET, this is how we play 

Our teams forge connections internally and work with some of the best-known brands on the planet, giving us truly international impact in a dynamic environment. Being the best at what we do isn’t just about delivering on our strategy. It's a competition for something incredibly valuable – our customers' choice. Every time a customer decides where to order, they're picking a side.

At the heart of the JET Customer League are our values and behaviours. They guide every interaction, every decision, every innovation. These are the actions we need to perform consistently and brilliantly, to surpass the competition and earn our customers’ loyalty, again and again.

Fun, fast-paced and supportive, the JET culture is about movement, growth, helping one another to succeed and celebrating wins. By truly living our values and embodying our behaviours, we’re building a customer-first culture which enables us to stay one step ahead of the competition. {Link relevant country benefits document here where available}

Inclusion, Diversity & Belongings

No matter who you are, what you look like, who you love, or where you are from, you can find your place at Just Eat Takeaway.com. We’re committed to creating an inclusive culture, encouraging diversity of people and thinking, in which all employees feel they truly belong and can bring their most colourful selves to work every day.

What else are we delivering?

Want to know more about our JETers, culture or company? Have a look at our career site where you can find people's stories, blogs, podcasts and more JET journeys.

Are you ready to join the team? Apply now!

#LI-OG1