Approximate time allocation for the first 12–18 months

Run Security Operations, Compliance, and Controls Assurance (~30%)

Keep a certified program disciplined, measurable, and audit-ready. You will:

Run the information security management system day to day: continuous control monitoring, vulnerability management with remediation to target timeframes, quarterly access reviews, external-transfer approvals, vendor assessments, policy upkeep, and security and data-handling training.

Maintain SOC 2 Type II, ISO 27001, ISO 27018, and TX-RAMP without major findings, and manage auditor, penetration-test, internal-audit, and privacy-assessment relationships and the annual re-test calendar.

Serve as incident commander: own the incident response plan, run annual technical and executive tabletop and DR/BC exercises, meet notification commitments with Legal, and drive corrective actions to closure.

Oversee cloud security posture across AWS and Snowflake, including the PII enclave, account separation, identity and access controls, logging, and backup integrity.

Lead Privacy-Enhancing Technologies and Data-Layer Privacy Strategy (~25%)

Define how a national data trust protects sensitive data at the data layer itself. You will:

Set the multi-year strategy for privacy-enhancing technologies (PETs) across the platform and data-partner ecosystem, including tokenization, privacy-preserving record linkage, and encryption of sensitive fields, in line with established industry standards.

Partner with the CTO on roadmap prioritization and with the VP, Legal and Data Protection on the partner agreements and pilots that adoption depends on; engage the Technology and Security Advisory Board on method selection.

Advance the data-minimization principles set by the Cyber Governance Committee: hold the least data, in the least exposed form, for the least time.

Vice President, Information Security

Responsibilities

Qualification

Preferred

Benefits

Company

Stradaeducation

More roles at Stradaeducation