GRC Assurance Manager

Overview

As Security Assurance Manager at Wayve, you will design and scale our security assurance capability to validate controls and support certifications like TISAX and ISO 21434. You’ll embed assurance into daily operations, turning evidence-based findings into continuous improvements. You’ll partner with engineering teams to automate evidence collection and elevate assurance from ad hoc checks to a data-driven, scalable program. This role offers impact in shaping security governance in a fast‑growing, engineering-led company.

Responsibilities

• Design, implement and continuously improve Wayve’s security assurance capability
• Develop risk-based assurance methodologies to verify control effectiveness
• Define testing approaches, assurance plans, and reporting for a maturing security programme
• Build trusted cross-functional relationships to embed assurance in operations
• Foster a culture where assurance provides actionable insights for security posture
• Perform ongoing assurance activities to validate design and operating effectiveness of controls across the organisation
• Produce objective, evidence-based assessments and clearly communicate findings
• Independently assess controls while collaborating with teams to improve outcomes
• Track assurance findings through remediation and verify issues are addressed
• Support external assessments, certifications, and customer assurance with trusted evidence
• Partner with the Security Analytics Engineer to automate evidence collection
• Identify opportunities to replace manual activities with scalable, data-driven approaches
• Develop repeatable testing methodologies to improve consistency, quality, and coverage
• Contribute to evolving the security control framework to improve design and measurability
• Establish the assurance capability and embed it into the Security programme
• Deliver independent assurance over controls supporting key certifications and customer commitments
• Introduce automation in assurance activities through collaboration with analytics engineers
• Cultivate a culture of assurance as a source of insight for continuous security improvement

Key requirements

• Experience designing, building or operating security assurance in organisations with modern tech stacks
• Strong understanding of security controls and evaluation of design and operating effectiveness
• Experience in cloud-native, SaaS-heavy environments and collaboration with engineering teams
• Experience developing assurance methodologies, performing control testing, and communicating outcomes to technical and non-technical stakeholders
• Ability to challenge control effectiveness while building collaborative relationships
• Strong communication skills with ability to influence stakeholders
• Pragmatic mindset balancing governance with fast-moving engineering context

• strong communication
• influencing stakeholders
• collaboration
• security assurance
• controls testing
• design and operating effectiveness assessment

…