The opportunity
At Doordash, Deliveroo and Wolt, we’re building the industry’s most scalable and reliable delivery network to support our multi-sided marketplace of consumers, merchants, Dashers, and partners. Security, privacy, and compliance are foundational to earning and maintaining trust as we expand globally.
What you'll do
Design and operate a global compliance change management framework to: identify new or changing security, privacy, regulatory, contractual and framework obligations across DoorDash’s markets and products.
Maintain a structured view of DoorDash’s compliance landscape, including: obligation inventories, control mappings, ownership models, risk decisions and remediation status.
Lead compliance-impact assessments for new regulations, framework updates,: product launches, market expansions, vendor changes and major technology initiatives.
Facilitate compliance risk workshops with Engineering, Legal, Privacy,: Product, Procurement, IT, Internal Audit and business stakeholders.
Translate complex regulatory, security, and privacy requirements into: practical control expectations and specifications that technical and non-technical teams can implement.
Identify control gaps, assess residual risk, define remediation plans and: track progress through closure with clear accountability.
What they're looking for
- Partner with control owners to improve evidence quality, audit readiness, and: sustainable operation of controls across global compliance frameworks.
- Help mature DoorDash’s risk register, compliance reporting, dashboards,: metrics and executive-level risk communications.
- Support control mapping and harmonization across frameworks such as ISO: 27001, SOC 2, NIST CSF, PCI DSS, GDPR, UK GDPR, NIS2, DORA, and emerging AI governance requirements.
- Promote a risk-based, pragmatic compliance culture that enables DoorDash: teams to move quickly while protecting customers, partners, employees and the business.
