Governance, Risk and Compliance Lead

About us

At Wayve we're committed to creating a diverse, fair and respectful culture that is inclusive of everyone based on their unique skills and perspectives, and regardless of sex, race, religion or belief, ethnic or national origin, disability, age, citizenship, marital, domestic or civil partnership status, sexual orientation, gender identity, veteran status, pregnancy or related condition (including breastfeeding) or any other basis as protected by applicable law.

Founded in 2017, Wayve is the leading developer of Embodied AI technology. Our advanced AI software and foundation models enable vehicles to perceive, understand, and navigate any complex environment, enhancing the usability and safety of automated driving systems.

Our vision is to create autonomy that propels the world forward. Our intelligent, mapless, and hardware-agnostic AI products are designed for automakers, accelerating the transition from assisted to automated driving.

In our fast-paced environment big problems ignite us‑we embrace uncertainty, leaning into complex challenges to unlock groundbreaking solutions. We aim high and stay humble in our pursuit of excellence, constantly learning and evolving as we pave the way for a smarter, safer future.

At Wayve, your contributions matter. We value diversity, embrace new perspectives, and foster an inclusive work environment; we back each other to deliver impact.

Make Wayve the experience that defines your career!

As Governance, Risk and Compliance (GRC) Lead at Wayve, you'll define, build, and lead our security GRC capability. You'll be trusted to determine what good looks like for GRC at Wayve, applying industry best practice with pragmatism and adapting it to our technology, risk profile, and stage of growth. You will be accountable for establishing and operating the frameworks, processes, and oversight that enable Wayve to understand, manage, and communicate its information security risk posture, while supporting the secure and compliant delivery of our technology across the business.

You’ll partner closely with security specialists, engineering, IT, Legal, procurement, and business stakeholders to ensure security risks are identified, assessed, and managed effectively, and that assurance activities are proportionate, pragmatic, and aligned to Wayve's risk profile, regulatory obligations, and customer expectations.

This role combines hands‑on delivery with leadership responsibility. From day one, you'll line‑manage a small GRC team and be directly involved in the execution of core GRC activities, while defining and delivering the roadmap for maturing Wayve's GRC capability. As the function matures and scales, the role will evolve towards a stronger leadership and management focus, with increased delegation and team ownership over time.

The role is advisory in nature, focused on providing oversight, challenge, and pragmatic guidance to the business, while enabling teams to meet security and compliance expectations without unnecessary friction.

• Security Risk Management
  • Own and operate Wayve's information security risk management framework and processes, including risk identification, assessment, treatment tracking, and risk acceptance governance.
  • Establish a regular cadence of risk review with risk owners and senior stakeholders, and develop metrics that demonstrate the effectiveness and maturity of Wayve's risk management approach.
• Policies, Standards & Exceptions
  • Own the lifecycle of information security policies and standards, including authoring, maintenance, approval, and review.
  • Manage policy exceptions and risk‑based deviations within defined parameters, ensuring decisions are documented, consistent, and aligned to Wayve's risk appetite.
• Security Awareness & Training
  • Own the definition and oversight of Wayve's security awareness and training approach, ensuring staff receive appropriate, role‑relevant guidance to meet security and compliance expectations.
  • Partner with relevant teams to ensure training is proportionate, effective, and aligned to Wayve's risk profile, and track completion and effectiveness through meaningful metrics.
• Security Assurance &…