GRC Assurance Manager

Job description

Before the detail, here's the challenge you'd help us solve. We build the embodied intelligence that moves real vehicles safely, and the ecosystem a billion machines will run on in the future. Very few people in AI can say this. Every role here, whatever the team, plugs into that. Here’s what this particular role covers. SECURITY ASSURANCE MANAGER 🔐 About our Security Team As Wayve grows, so do the expectations of our customers and stakeholders. We need a scalable approach to validating our controls and providing confidence that our security programme is operating as intended. As our Security Assurance Manager, you’ll join the Security team to establish Wayve’s security assurance capability. You’ll design and operate the processes, methodologies and relationships that enable continuous validation of our security controls, supporting certifications such as TISAX and ISO 21434, meeting customer contractual commitments and strengthening trust across the organisation. This is an opportunity to build a security assurance capability from the ground up. As a fast-growing engineering organisation, you’ll help shape how assurance evolves as we scale, moving from periodic, manual testing towards continuous, data-driven validation. 🧠 Your day-to-day You’ll design and operate a pragmatic, risk-based assurance programme that provides objective evidence that Wayve’s security controls are designed appropriately and operating effectively. You’ll independently assess controls while working collaboratively with teams across Wayve to strengthen security outcomes and improve control maturity. You’ll develop testing methodologies, track findings through remediation and support external assessments, certifications and customer assurance activities. You’ll also partner closely with the Security Analytics Engineer to automate evidence collection and develop scalable, data-driven approaches to continuous assurance. 🧩 What you’ll be working on: - Designing, implementing and continuously improving Wayve’s security assurance capability. - Developing pragmatic, risk-based assurance methodologies that provide confidence our security controls are operating effectively. - Defining testing approaches, assurance plans and reporting that support the security programme as it continues to mature. - Building trusted relationships across Wayve to embed assurance into the way we operate. - Helping establish a culture where assurance is viewed as a source of insight that improves our security posture rather than as a burden. - Performing ongoing assurance activities to validate the design and operating effectiveness of security controls across the organisation. - Producing objective, evidence-based assessments of control effectiveness and clearly communicating findings to stakeholders. - Independently assessing controls while collaborating with teams to strengthen security outcomes and improve control maturity. - Tracking assurance findings through remediation and validating that identified issues have been effectively addressed. - Supporting external assessments, certifications and customer assurance activities by providing trusted assurance evidence. - Partnering with the Security Analytics Engineer to automate evidence collection and evolve assurance from periodic assessments towards continuous validation. - Identifying opportunities to replace manual assurance activities with scalable, data-driven approaches. - Developing repeatable testing methodologies that increase consistency, quality and coverage as the programme matures. - Contributing to the evolution of Wayve’s security control framework by identifying opportunities to improve control design, measurability and assurance. During your first year, you’ll establish Wayve’s security assurance capability and embed it into the Security programme. You’ll implement an ongoing assurance process for key security controls, build strong partnerships across internal teams and deliver independent, evidence-based assurance supporting TISAX, ISO 21434 and customer security commitments. You’ll also introduce automation into selected assurance activities and help establish assurance as a continuous source of insight for improving security. 🙌 You should apply if: - You have experience designing, building or operating security assurance or controls assurance within organisations with modern technology stacks. - You have a strong understanding of security controls and how to evaluate both their design and operating effectiveness. - You have experience working in cloud-native, SaaS-heavy environments and collaborating closely with engineering teams. - You have experience developing assurance methodologies, performing control testing and communicating assurance outcomes to technical and non-technical stakeholders. - You can independently challenge control effectiveness while building collaborative relationships that help teams improve. - You have stro