GRC Assurance Manager

Wayve; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Wayve is building a scale-up security assurance capability within its Security team to continuously validate security controls and provide evidence for certifications such as TISAX and ISO 21434. The role partners with engineering and analytics to evolve assurance from periodic checks to data-driven, automated processes.

You will design testing approaches, define assurance plans, and embed assurance into how Wayve operates, influencing governance and security posture across the organisation.

Qualifications

• Experience designing, building, or operating security assurance within modern tech stacks.
• Strong understanding of security controls and evaluating design and operating effectiveness.
• Experience in cloud-native SaaS environments and collaborating with engineering teams.
• Experience developing assurance methodologies and communicating outcomes to stakeholders.
• Ability to challenge control effectiveness while maintaining collaborative relationships.

Responsibilities

• Build our security assurance capability and embed it into the Security programme.
• Validate the design and operating effectiveness of security controls across the organisation.
• Produce objective, evidence-based assessments and communicate findings to stakeholders.
• Track assurance findings through remediation and support external assessments and customer assurance activities.
• Partner with analytics engineer to automate evidence collection and move to continuous validation.

Skills

Security assurance

Cloud-native environments

Stakeholder communication

Control testing

Automation collaboration

Education

CISA/ISO27001 Lead Auditor (Desirable)

Tools

Security framework tooling

Job description

About The Role

As Wayve grows, so do the expectations of our customers and stakeholders. We need a scalable approach to validating our controls and providing confidence that our security programme is operating as intended. As our Security Assurance Manager, you’ll join the Security team to establish Wayve’s security assurance capability. You’ll design and operate the processes, methodologies, and relationships that enable continuous validation of our security controls, supporting certifications such as TISAX and ISO 21434, meeting customer contractual commitments, and strengthening trust across the organisation.

This is an opportunity to build a security assurance capability from the ground up. As a fast-growing engineering organisation, you’ll shape how assurance evolves as we scale. You’ll work closely with teams across Wayve to evolve assurance from periodic, manual testing towards continuous, data-driven validation.

We’d love to hear from you if you’re motivated by helping engineering teams build stronger security through objective evidence, collaboration, and continuous improvement.

Key responsibilities

Build our security assurance capability

• Design, implement, and continuously improve Wayve’s security assurance capability.
• Develop pragmatic, risk-based assurance methodologies that provide confidence our security controls are operating effectively.
• Define testing approaches, assurance plans, and reporting that support our security programme as it continues to mature.
• Build trusted relationships across Wayve to embed assurance into the way we operate.
• Help establish a culture where assurance is recognised not as a burden, but as a source of insight that helps us improve our security posture.

Validate control effectiveness

• Perform ongoing assurance activities to validate the design and operating effectiveness of security controls across the organisation.
• Produce objective, evidence-based assessments of control effectiveness and clearly communicate findings to stakeholders.
• Independently assess controls while working collaboratively with teams to strengthen security outcomes and improve control maturity.
• Track assurance findings through remediation, validating that issues have been effectively addressed.
• Support external assessments, certifications, and customer assurance activities by providing trusted assurance evidence.

Drive continuous assurance

• Partner with the Security Analytics Engineer to automate evidence collection and evolve assurance from periodic assessments to continuous validation.
• Identify opportunities to replace manual assurance activities with scalable, data-driven approaches.
• Develop repeatable testing methodologies that increase consistency, quality, and coverage as the programme matures.
• Contribute to the ongoing evolution of Wayve’s security control framework by identifying opportunities to improve control design, measurability, and assurance.

About you

Essential

• Experience designing, building, or operating security assurance or controls assurance within organisations with modern tech stacks.
• Strong understanding of security controls and how to evaluate both design and operating effectiveness.
• Experience working in cloud-native, SaaS-heavy environments and collaborating closely with engineering teams.
• Experience developing assurance methodologies, performing control testing, and communicating assurance outcomes to technical and non-technical stakeholders.
• Ability to independently challenge control effectiveness while building collaborative relationships that help teams improve.
• Strong communication skills, with the ability to influence stakeholders across our business.
• A pragmatic mindset, balancing strong governance with the realities of a fast-moving engineering-led organisation.

Desirable

• Experience supporting security assurance programmes for frameworks such as TISAX, ISO 21434, ISO 27001, SOC 2, or similar.
• Experience helping organisations evolve from periodic assurance towards continuous assurance.
• Familiarity with assurance techniques in cloud-native and software engineering environments.
• Professional certifications such as CISA, ISO 27001 Lead Auditor, or similar.

What success looks like

During Your First Year You Will

• Establish Wayve’s security assurance capability and embed it into the Security programme.
• Implement an ongoing assurance process that provides confidence key security controls are operating effectively.
• Build strong partnerships across internal teams that enable assurance to become a collaborative activity rather than a point-in-time exercise.
• Deliver independent, evidence-based assurance over controls supporting TISAX, ISO 21434, and customer security commitments.
• Introduce automation into selected assurance activities through partnership with the Security Analytics Engineer.
• Help establish a culture where assurance is recognised as a source of insight that enables Security to continuously improve.