IT & Security Manager

The role 

As Wayve grows across continents, we are looking for a Corporate Security Engineering Manager to own the systems and controls layer the whole company runs on: identity, endpoint, device and asset lifecycle, SaaS, and the and the security controls implemented in all of them. Most of this role is platform ownership. You will lead a distributed team of engineers across the UK, Germany and the US.

This is a build role. We are standing this layer up properly for the first time, so you will shape how it works rather than inherit someone else's design, and the team and headcount to do it are already approved.

It is one of three peer leadership roles in our infrastructure, IT and security function, all reporting to the same Head of IT. One peer owns the network estate, one owns our global support service, and you own the platforms and the controls. You will also work closely with our central Security team and with the engineering teams whose work depends the platforms you own.

You will do well here if you like owning platforms end to end, turning manual work into automation, and growing the engineers around you.

Key responsibilities

• Own the operation of our corporate security controls: endpoint hardening, identity and access, privileged access, vulnerability and patch management, and access reviews. 

• Partner with our central Security team on policy, vulnerability management and incident response. They own those processes; you make them real in the IT environment.

• Own Okta and everything on it: application onboarding, SSO and SAML migration, group and attribute automation, the application catalogue, and the automation that grants and revokes access. Our Helpdesk Lead runs the joiner, mover and leaver process itself; you own the platform it runs on and the evidence that access was revoked.

• Own endpoint management across a genuinely mixed Mac, Windows and Linux fleet, covering enrolment, baselines, patching and compliance reporting.

• Own device and asset lifecycle and SaaS and licensing, including records, reconciliation, audit process, inventory accuracy, tenant administration and vendor relationships.

• Lead, grow and hire a distributed team across three countries and several time zones, and develop engineers into domain owners with clear standards behind each domain.

• Partner with the Helpdesk Lead on what gets automated away, with the Network Manager on work that crosses both lines such as 802.1x and device posture, and act as the function's interface to compliance on identity, endpoint and asset controls.

• Turn certification requirements into implemented controls, and into evidence the platform produces on demand.

About you  

In order to set you up for success as a Corporate Security Engineering Manager at Wayve, we are looking for the following skills and experience.

Essential

• Experience leading an IT, security or infrastructure team, including hiring, performance management and developing engineers.

• Deep hands-on background in corporate IT platforms: identity (Okta or Entra), endpoint management at fleet scale (Iru, Jamf, Intune or equivalent), and SaaS administration.

• Hands-on Linux fleet management alongside Mac and Windows.

• Practical security operations experience: endpoint hardening, vulnerability and patch management, incident response, access reviews, and privileged access or zero-trust access delivery.

• Delivered against a security certification or audit (TISAX, ISO 27001, SOC 2 or equivalent) on the implementation and evidence side.

• Scripting or infrastructure-as-code ability, enough to set the standard and review your team's work.

• Experience scaling a corporate estate through fast growth and multi-site expansion.

• Holds a clear boundary with peer managers, and is honest about risk upward as well as downward.

Desirable

• Experience of a supplier-security assessment in an automotive or OEM supply chain.

• Has stood up a corporate security capability from scratch rather than inheriting a mature one.

• Hands-on with 802.1x and certificate-based device posture from the identity and endpoint side.

• Exposure to offices, labs, garages and test facilities rather than offices alone, or to AI development environments.

This is a full-time role based in our office in London.  At Wayve we want the best of all worlds so we operate a hybrid working policy that combines time together in our offices and workshops to fuel innovation, culture, relationships and learning, and time spent working from home.