Automotive Security Product Lead

Automotive Product Security Lead

Location:

London, United Kingdom

Wayve is the leading developer of Embodied AI technology. Founded in 2017, we create advanced AI software and foundation models that enable vehicles to perceive, understand and navigate any complex environment, enhancing usability and safety of automated driving systems.

As the Automotive Product Security Lead at Wayve, you will define, mature, and operate the product security framework for Wayve’s automotive software activities across internal R&D, robotaxi, and OEM supply chains. You will ensure compliance with internal governance, customers, regulators, and external assessors, translating regulations, standards, and customer expectations into clear, practical requirements. You will work closely with product, engineering, safety, and customer-facing teams to set standards, guide, assure implementation, and maintain cybersecurity cases while escalating risks when necessary.

The role focuses on advisory and assurance, providing oversight, challenge, and pragmatic guidance to enable teams to meet automotive cybersecurity expectations without undue friction.

• Automotive Product Security Framework & Strategy
• Define and maintain Wayve's automotive product security framework, aligned to ISO 21434, ASPICE for Cybersecurity, and customer assurance expectations.
• Establish practical processes, templates, guidance, and minimum control expectations for automotive cybersecurity activities across R&D fleet, robotaxi, and customer software programmes.
• Programme Guidance & Coordination
• Act as the product security lead across automotive software activities, helping teams understand what security activities are required, when they are required, and what good evidence looks like.
• Coordinate product security activity across security, product, engineering, safety, and customer-facing teams to ensure dependencies, risks, and assurance needs are understood early.
• Cybersecurity Case Assurance
• Define the minimum expectations, structure, and quality bar for Wayve's automotive cybersecurity cases.
• Provide independent review of required work products, traceability and completeness, residual risk statements, and the overall credibility of the cybersecurity case.
• Assess whether the cybersecurity case provides a defensible argument that the relevant system or software is acceptably secure for its intended context.
• Product Security Risk Governance
• Establish mechanisms for product cybersecurity risk visibility, challenge, escalation, and decision-making across automotive programmes.
• Partner with risk owners to ensure residual product cybersecurity risks are clearly documented, treatment options are understood, remediation is tracked, and acceptance decisions are made by the appropriate accountable owners.
• Challenge and elevate risks or gaps where evidence is insufficient.
• Regulatory, Customer & OEM Readiness
• Translate automotive cybersecurity regulatory, standards, and customer expectations into practical internal requirements and assurance activities.
• Support preparation for external audits, customer assessments, and OEM reviews where product cybersecurity evidence is required.
• Represent Wayve credibly in product security discussions with customers, partners, and external assessors.
• Secure Development Enablement
• Advise and upskill product and engineering teams on automotive cybersecurity practices, including TARA, cybersecurity requirements, secure architecture, implementation evidence, verification, validation, and security testing expectations.
• Build reusable guidance and playbooks that help teams integrate product security into existing development processes without duplicative or unnecessary process overhead.
• Metrics, Reporting & Continuous Improvement
• Develop meaningful metrics that demonstrate automotive product security maturity, assurance readiness, evidence quality, risk treatment progress, and recurring areas of weakness.
• Provide clear reporting to security, product, engineering and other senior stakeholders, using evidence and judgement to drive continuous improvement in Wayve's product security capability.

• Proven…