GRC Assurance Manager

Before the detail, here's the challenge you'd help us solve.

We build the embodied intelligence that moves real vehicles safely, and the ecosystem a billion machines will run on in the future. Very few people in AI can say this. Every role here, whatever the team, plugs into that.

Here’s what this particular role covers.

Security Assurance Manager

🔐 About our Security Team

As Wayve grows, so do the expectations of our customers and stakeholders. We need a scalable approach to validating our controls and providing confidence that our security programme is operating as intended.

As our Security Assurance Manager, you’ll join the Security team to establish Wayve’s security assurance capability. You’ll design and operate the processes, methodologies and relationships that enable continuous validation of our security controls, supporting certifications such as TISAX and ISO 21434, meeting customer contractual commitments and strengthening trust across the organisation.

This is an opportunity to build a security assurance capability from the ground up. As a fast-growing engineering organisation, you’ll help shape how assurance evolves as we scale, moving from periodic, manual testing towards continuous, data-driven validation.

🧠 Your day-to-day

You’ll design and operate a pragmatic, risk-based assurance programme that provides objective evidence that Wayve’s security controls are designed appropriately and operating effectively.

You’ll independently assess controls while working collaboratively with teams across Wayve to strengthen security outcomes and improve control maturity. You’ll develop testing methodologies, track findings through remediation and support external assessments, certifications and customer assurance activities.

You’ll also partner closely with the Security Analytics Engineer to automate evidence collection and develop scalable, data-driven approaches to continuous assurance.

🧩 What you’ll be working on:

Designing, implementing and continuously improving Wayve’s security assurance capability.

Developing pragmatic, risk-based assurance methodologies that provide confidence our security controls are operating effectively.

Defining testing approaches, assurance plans and reporting that support the security programme as it continues to mature.

Building trusted relationships across Wayve to embed assurance into the way we operate.

Helping establish a culture where assurance is viewed as a source of insight that improves our security posture rather than as a burden.

Performing ongoing assurance activities to validate the design and operating effectiveness of security controls across the organisation.

Producing objective, evidence-based assessments of control effectiveness and clearly communicating findings to stakeholders.

Independently assessing controls while collaborating with teams to strengthen security outcomes and improve control maturity.

Tracking assurance findings through remediation and validating that identified issues have been effectively addressed.

Supporting external assessments, certifications and customer assurance activities by providing trusted assurance evidence.

Partnering with the Security Analytics Engineer to automate evidence collection and evolve assurance from periodic assessments towards continuous validation.

Identifying opportunities to replace manual assurance activities with scalable, data-driven approaches.

Developing repeatable testing methodologies that increase consistency, quality and coverage as the programme matures.

Contributing to the evolution of Wayve’s security control framework by identifying opportunities to improve control design, measurability and assurance.

During your first year, you’ll establish Wayve’s security assurance capability and embed it into the Security programme. You’ll implement an ongoing assurance process for key security controls, build strong partnerships across internal teams and deliver independent, evidence-based assurance supporting TISAX, ISO 21434 and customer security commitments. You’ll also introduce automation into selected assurance activities and help establish assurance as a continuous source of insight for improving security.

🙌 You should apply if:

You have experience designing, building or operating security assurance or controls assurance within organisations with modern technology stacks.

You have a strong understanding of security controls and how to evaluate both their design and operating effectiveness.

You have experience working in cloud-native, SaaS-heavy environments and collaborating closely with engineering teams.

You have experience developing assurance methodologies, performing control testing and communicating assurance outcomes to technical and non-technical stakeholders.

You can independently challenge control effectiveness while building collaborative relationships that help teams improve.

You have strong communication skills and can influence stakeholders across the business.

You bring a pragmatic mindset that balances strong governance with the realities of a fast-moving, engineering-led organisation.

Experience supporting security assurance programmes for frameworks such as TISAX, ISO 21434, ISO 27001, SOC 2 or similar is a plus.

Experience helping organisations evolve from periodic assurance towards continuous assurance is a plus.

Familiarity with assurance techniques in cloud-native and software engineering environments is a plus.

Professional certifications such as CISA, ISO 27001 Lead Auditor or similar are a plus.

🌱 Not ticking every box? That’s totally okay! If you’re passionate about autonomy and keen to learn, we encourage you to apply even if you don’t meet every requirement.

More about Wayve:

🚀 Wayve is building the leading AI platform for autonomous driving. We are pioneering an end to end AI approach that enables vehicles to learn directly from real world experience, developing the ability to adapt, generalise and improve at scale. Instead of relying on hand coded rules or pre mapped environments, our AI Driver learns to drive by understanding the world around it. The result is technology that navigates complex urban environments with intelligence, precision and natural flow, unlocking meaningful advances in both safety and efficiency. We believe autonomy represents a once in a generation transformation in how people and goods move, comparable to the shift from horses to cars, and from human driven vehicles to intelligent machines.

Our ambition is to make autonomy universal. Wayve’s mapless and hardware agnostic AI platform integrates with global OEM partners, enabling continuous software evolution and unlocking advanced levels of automation from L2 plus through to L4 as our core AI model scales. In a race increasingly defined by intelligence and real world learning, Wayve is taking a distinct approach, building a generalisable driving intelligence that can power any vehicle, anywhere. By combining embodied AI with scalable deployment, we are creating technology that can be shaped to each OEM brand and driver experience, accelerating the transition to a safer, more intelligent future of mobility.

How we work 💻 – Locations & Flexible Working:

Our main hubs are in London, Sunnyvale, Yokohama, Herzliya, Vancouver and Leonberg. We operate a hybrid working model that combines in-person collaboration in our dedicated office spaces with focused time working remotely. This gives our teams the connection and energy of working together, alongside the flexibility to do their best work in a way that fits their lives.

🔍 The Interview Process:

Our process is clear and respectful of your time:

Initial call / recruiter screen (30 mins)

Competency interviews (Hiring Manager Interview) (45 mins)

Deep-dive interviews (Technical Interviews) (60 mins)

Final interview (30 mins)

We’ll always explain the format and work around your av