GRC Assurance Manager
Wayve · London, United Kingdom · 1mo ago
About us
Founded in 2017, Wayve is the leading developer of Embodied AI technology. Our advanced AI software and foundation models enable vehicles to perceive, understand, and navigate any complex environment, enhancing the usability and safety of automated driving systems.
Our vision is to create autonomy that propels the world forward. Our intelligent, mapless, and hardware-agnostic AI products are designed for automakers, accelerating the transition from assisted to automated driving.
In our fast-paced environment big problems ignite us—we embrace uncertainty, leaning into complex challenges to unlock groundbreaking solutions. We aim high and stay humble in our pursuit of excellence, constantly learning and evolving as we pave the way for a smarter, safer future.
At Wayve, your contributions matter. We value diversity, embrace new perspectives, and foster an inclusive work environment; we back each other to deliver impact.
Make Wayve the experience that defines your career!
About the role
As Wayve grows, so do the expectations of our customers and stakeholders. We need a scalable approach to validating our controls and providing confidence that our security programme is operating as intended.
As our Security Assurance Manager, you’ll join the Security team to establish Wayve’s security assurance capability. You’ll design and operate the processes, methodologies, and relationships that enable continuous validation of our security controls, supporting certifications such as TISAX and ISO 21434, meeting customer contractual commitments, and strengthening trust across the organisation.
This is an opportunity to build a security assurance capability from the ground up. As a fast-growing engineering organisation, you’ll shape how assurance evolves as we scale. You’ll work closely with teams across Wayve to evolve assurance from periodic, manual testing towards continuous, data-driven validation.
We’d love to hear from you if you’re motivated by helping engineering teams build stronger security through objective evidence, collaboration, and continuous improvement.
Key responsibilities
Build our security assurance capability
- Design, implement, and continuously improve Wayve’s security assurance capability.
- Develop pragmatic, risk-based assurance methodologies that provide confidence our security controls are operating effectively.
- Define testing approaches, assurance plans, and reporting that support our security programme as it continues to mature.
- Build trusted relationships across Wayve to embed assurance into the way we operate.
- Help establish a culture where assurance is recognised not as a burden, but as a source of insight that helps us improve our security posture.
Validate control effectiveness
- Perform ongoing assurance activities to validate the design and operating effectiveness of security controls across the organisation.
- Produce objective, evidence-based assessments of control effectiveness and clearly communicate findings to stakeholders.
- Independently assess controls while working collaboratively with teams to strengthen security outcomes and improve control maturity.
- Track assurance findings through remediation, validating that issues have been effectively addressed.
- Support external assessments, certifications, and customer assurance activities by providing trusted assurance evidence.
Drive continuous assurance
- Partner with the Security Analytics Engineer to automate evidence collection and evolve assurance from periodic assessments to continuous validation.
- Identify opportunities to replace manual assurance activities with scalable, data-driven approaches.
- Develop repeatable testing methodologies that increase consistency, quality, and coverage as the programme matures.
- Contribute to the ongoing evolution of Wayve’s security control framework by identifying opportunities to improve control design, measurability, and assurance.
About you
Essential
- Experience designing, building, or operating security assurance or controls assurance within organisations with modern tech stacks.
- Strong understanding of security controls and how to evaluate both design and operating effectiveness.
- Experience working in cloud-native, SaaS-heavy environments and collaborating closely with engineering teams.
- Experience developing assurance methodologies, performing control testing, and communicating assurance outcomes to technical and non-technical stakeholders.
- Ability to independently challenge control effectiveness while building collaborative relationships that help teams improve.
- Strong communication skills, with the ability to influence stakeholders across our business.
- A pragmatic mindset, balancing strong governance with the realities of a fast-moving engineering-led organisation.
Desirable
- Experience supporting security assurance programmes for frameworks such as TISAX, ISO 21434, ISO 27001, SOC 2, or similar.
- Experience helping organisations evolve from periodic assurance towards continuous assurance.
- Familiarity with assurance techniques in cloud-native and software engineering environments.
- Professional certifications such as CISA, ISO 27001 Lead Auditor, or similar.
What success looks like
During your first year you will:
- Establish Wayve’s security assurance capability and embed it into the Security programme.
- Implement an ongoing assurance process that provides confidence key security controls are operating effectively.
- Build strong partnerships across internal teams that enable assurance to become a collaborative activity rather than a point-in-time exercise.
- Deliver independent, evidence-based assurance over controls supporting TISAX, ISO 21434, and customer security commitments.
- Introduce automation into selected assurance activities through partnership with the Security Analytics Engineer.
- Help establish a culture where assurance is recognised as a source of insight that enables Security to continuously improve.
Wayve is committed to creating an inclusive interview experience. If you require any accommodations or adjustments to participate fully in our interview process, please let us know.
We understand that everyone has a unique set of skills and experiences and that not everyone will meet all of the requirements listed above. If you’re passionate about self-driving cars and think you have what it takes to make a positive impact on the world, we encourage you to apply.
At Wayve we're committed to creating a diverse, fair and respectful culture that is inclusive of everyone based on their unique skills and perspectives, and regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, veteran status, pregnancy or related condition (including breastfeeding) or any other basis as protected by applicable law.
For more information visit Careers at Wayve.
To learn more about what drives us, visit Values at Wayve
For US candidates only, please visit E-Verify Notice and Participation and Right to Work
DISCLAIMER: We will not ask about marriage or pregnancy, care responsibilities or disabilities in any of our job adverts or interviews. However, we do look to capture information about care responsibilities, and disabilities among other diversity information as part of an optional DEI Monitoring form to help us identify areas of improvement in our hiring process and ensure that the process is inclusive and non-discriminatory.