IT & Security Manager in London

Founded in 2017, Wayve is the leading developer of Embodied AI technology. Our advanced AI software and foundation models enable vehicles to perceive, understand, and navigate any complex environment, enhancing the usability and safety of automated driving systems. Our vision is to create autonomy that propels the world forward. Our intelligent, mapless, and hardware-agnostic AI products are designed for automakers, accelerating the transition from assisted to automated driving. In our fast-paced environment big problems ignite us—we embrace uncertainty, leaning into complex challenges to unlock groundbreaking solutions. We aim high and stay humble in our pursuit of excellence, constantly learning and evolving as we pave the way for a smarter, safer future. At Wayve, your contributions matter. We value diversity, embrace new perspectives, and foster an inclusive work environment; we back each other to deliver impact.

As Wayve grows across continents, we are looking for a Corporate Security Engineering Manager to own the systems and controls layer the whole company runs on: identity, endpoint, device and asset lifecycle, SaaS, and the security controls implemented in all of them. Most of this role is platform ownership. You will lead a distributed team of engineers across the UK, Germany and the US. This is a build role. We are standing this layer up properly for the first time, so you will shape how it works rather than inherit someone else's design, and the team and headcount to do it are already approved. It is one of three peer leadership roles in our infrastructure, IT and security function, all reporting to the same Head of IT. One peer owns the network estate, one owns our global support service, and you own the platforms and the controls. You will also work closely with our central Security team and with the engineering teams whose work depends on the platforms you own. You will do well here if you like owning platforms end to end, turning manual work into automation, and growing the engineers around you.

Key responsibilities

• Own the operation of our corporate security controls: endpoint hardening, identity and access, privileged access, vulnerability and patch management, and access reviews.
• Partner with our central Security team on policy, vulnerability management and incident response.
• Own Okta and everything on it: application onboarding, SSO and SAML migration, group and attribute automation, the application catalogue, and the automation that grants and revokes access.
• Own endpoint management across a genuinely mixed Mac, Windows and Linux fleet, covering enrolment, baselines, patching and compliance reporting.
• Own device and asset lifecycle and SaaS and licensing, including records, reconciliation, audit process, inventory accuracy, tenant administration and vendor relationships.
• Lead, grow and hire a distributed team across three countries and several time zones, and develop engineers into domain owners with clear standards behind each domain.
• Partner with the Helpdesk Lead on what gets automated away, with the Network Manager on work that crosses both lines such as 802.1x and device posture, and act as the function's interface to compliance on identity, endpoint and asset controls.
• Turn certification requirements into implemented controls, and into evidence the platform produces on demand.

About you

In order to set you up for success as a Corporate Security Engineering Manager at Wayve, we are looking for the following skills and experience.

Essential

• Experience leading an IT, security or infrastructure team, including hiring, performance management and developing engineers.
• Deep hands-on background in corporate IT platforms: identity (Okta or Entra), endpoint management at fleet scale (Iru, Jamf, Intune or equivalent), and SaaS administration.
• Hands-on Linux fleet management alongside Mac and Windows.
• Practical security operations experience: endpoint hardening, vulnerability and patch management, incident response, access reviews, and privileged access or zero-trust access delivery.
• Delivered against a security certification or audit (TISAX, ISO 27001, SOC 2 or equivalent) on the implementation and evidence side.
• Scripting or infrastructure-as-code ability, enough to set the standard and review your team's work.
• Experience scaling a corporate estate through fast growth and multi-site expansion.
• Holds a clear boundary with peer managers, and is honest about risk upward as well as downward.

Desirable

• Experience of a supplier-security assessment in an automotive or OEM supply chain.
• Has stood up a corporate security capability from scratch rather than inheriting a mature one.
• Hands-on with 802.1x and certificate-based device posture from the identity and endpoint side.
• Exposure to offices, labs, garages and test facilities rather than offices alone, or to AI development environments.

This is a full-time role based in our office in London. At Wayve we want the best of all worlds so we operate a hybrid working policy that combines time together in our offices and workshops to fuel innovation, culture, relationships and learning, and time spent working from home.

Wayve is committed to creating an inclusive interview experience. If you require any accommodations or adjustments to participate fully in our interview process, please let us know. We understand that everyone has a unique set of skills and experiences and that not everyone will meet all of the requirements listed above. If you’re passionate about self-driving cars and think you have what it takes to make a positive impact on the world, we encourage you to apply.

At Wayve we're committed to creating a diverse, fair and respectful culture that is inclusive of everyone based on their unique skills and perspectives, and regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, veteran status, pregnancy or related condition (including breastfeeding) or any other basis as protected by applicable law.