> Markdown version of [/jobs/ext/1475597-information-security-manager](https://www.wearedevelopers.com/jobs/ext/1475597-information-security-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Manager

- **Company:** Speechmatics Limited
- **Location:** Cambridge, UK (Remote available)
- **Contract:** Internship / Graduate position
- **Skills:** Software System Penetration Testing, Cyber Security, Software Vulnerability Management, Information Technology
- **Published:** July 29, 2026
- **Apply:** https://uk.indeed.com/viewjob?jk=d799e6b22481c318

## About the Role

* A technical background you can back up: Computer Science, Information Security, or similar, plus real experience in cybersecurity or IT security management.
 * CISSP or CISM (or equivalent depth of experience). We care more about the substance than the letters.
 * A track record in incident management and governance, risk and control frameworks, ideally somewhere that also demanded technical credibility, not just process.
 * The confidence to say "that policy doesn't reflect how this actually works", and the technical grounding to be right.
 * A bias toward automating and simplifying, not toward adding another layer of sign-off.

## Description

* Leading security triage as the first port of call, assessing new CVEs, vulnerabilities and supply-chain risk against our real infrastructure, not just a checklist.
 * Running hands-on audits covering pen testing, vulnerability management, supply-chain security, bringing technical judgement, not just policy references.
 * Owning our governance, risk and compliance frameworks, and keeping them honest, turning policy into controls that actually work at the infrastructure and code level.
 * Automating the parts of GRC that don't need a human (vulnerability tooling, endpoint protection rollout, policy-to-enforcement mapping), so the function scales without the busywork.
 * Building real product and infrastructure knowledge, so you become the person people come to, not the person who has to go find someone else.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What is the real price of one successful line of code?](https://www.wearedevelopers.com/videos/1921-what-is-the-real-price-of-one-successful-line-of-code)
- [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)