Speechmatics is seeking an Information Security Manager to ensure the security of our speech-to-text platform and related systems. You will lead security triage for new CVEs and supply-chain risk, conduct hands-on audits including penetration testing and vulnerability management, and own governance, risk and compliance frameworks by turning policies into practical controls at the infrastructure and code levels. You will automate portions of GRC, such as vulnerability tooling and policy-to-enforcement mapping, to scale security effectively. You will develop strong product and infrastructure knowledge and become the go-to security expert for colleagues. Responsibilities also include building credibility with technical teams and driving security improvements across the organization. Requirements include a technical background (e.g., Computer Science, Information Security) and practical cybersecurity or IT security management experience; CISSP or CISM (or equivalent depth) preferred; a track record in incident management and GRC; the ability to challenge policies that do not reflect real-world operations; and a bias toward automation and simplification. We encourage applicants who may not meet every requirement but demonstrate the right mindset. The role is based in Cambridge on a hybrid basis with 2–3 designated office days per week. Speechmatics offers flexible working, benefits, and professional development opportunities.

Speechmatics is seeking an Information Security Manager to ensure the security of our speech-to-text platform and related systems. You will lead security triage for new CVEs and supply-chain risk, conduct hands-on audits including penetration testing and vulnerability management, and own governance, risk and compliance frameworks by turning policies into practical controls at the infrastructure and code levels. You will automate portions of GRC, such as vulnerability tooling and policy-to-enforcement mapping, to scale security effectively. You will develop strong product and infrastructure knowledge and become the go-to security expert for colleagues. Responsibilities also include building credibility with technical teams and driving security improvements across the organization. Requirements include a technical background (e.g., Computer Science, Information Security) and practical cybersecurity or IT security management experience; CISSP or CISM (or equivalent depth) preferred; a track record in incident management and GRC; the ability to challenge policies that do not reflect real-world operations; and a bias toward automation and simplification. We encourage applicants who may not meet every requirement but demonstrate the right mindset. The role is based in Cambridge on a hybrid basis with 2–3 designated office days per week. Speechmatics offers flexible working, benefits, and professional development opportunities.