Head of Security & Privacy

About Education Perfect

Education Perfect is an educational technology platform created to support educators in enhancing their teaching capabilities and tailoring learning experiences for students. It provides a suite of tools for learning, assessment, and insights with the goal of assisting teachers and their students to achieve optimal growth and potential.

As a member of Education Perfect, you will engage in impactful projects that affect students' lives directly while benefiting from support, resources, and freedom to advance your skills and career progression.

Position Overview

The organisation is seeking a seasoned Head of Security & Privacy to spearhead their approach to information security, privacy, and artificial intelligence governance. This role involves shaping strategic initiatives to secure the platform, protect data, and safeguard the millions of users including students and educators relying on Education Perfect daily.

Working alongside senior leadership and collaborating with engineering, product, and operations teams, you will integrate robust security and privacy methodologies into platform development and operations. You will help maintain ISO 27001 certification, enhance the overall security stance, and ensure delivery of trusted software solutions within the education sector.

Key Responsibilities

• Lead the formulation and execution of information security, privacy, and AI governance strategies.
• Oversee the Information Security Management System (ISMS), development, and enforcement of security policies and risk frameworks.
• Ensure continuous compliance and maintenance of ISO 27001 certification and other regulatory frameworks including ST4S.
• Act as Data Protection Officer, guaranteeing adherence to global regulations such as GDPR, New Zealand Privacy Act, and Australian Privacy Act.
• Manage security architecture, tools, vulnerability assessments, and incident response processes.
• Maintain and report on the security and privacy risk register to senior leaders and the board.
• Design and implement responsible AI governance frameworks that address ethical use cases.
• Lead evaluations of vendor security and privacy including third-party risk assessments.
• Deliver organisation-wide security training and awareness programs.
• Coordinate external security audits and certification endeavors.
• Manage business continuity plans, cyber insurance, and risk reporting mechanisms.
• Collaborate with cross-functional teams to embed security and privacy best practices into workflows.
• Serve as a primary contact for external parties such as customers, regulators, and government entities concerning security and privacy issues.

Candidate Profile

• Hands-on experience with security and privacy leadership in a cloud-native or SaaS environment.
• Strong leadership qualities with proven ability to influence senior management and interdisciplinary teams.
• In-depth understanding of ISO 27001 and associated security frameworks.
• Preferably holds certifications like CISSP, CISM, AIGP, or AWS Certified Security - Specialty.
• Expertise in cloud security architecture, especially AWS, alongside contemporary application security practices.
• Familiarity with DevOps methodologies and secure software development lifecycle practices.
• Proven experience in implementing security monitoring, alert systems, and incident management procedures.
• Thorough knowledge of international privacy laws including GDPR and privacy acts relevant to New Zealand and Australia.
• Skilled in data governance, classification, retention, and lifecycle management policies.
• Understanding of AI-related risks, governance frameworks, and challenges like bias and transparency.
• Experienced in conducting security risk assessments, audits, and ensuring compliance.

Equity and Inclusion Statement

Education Perfect values diversity and is committed to equitable opportunities, growth, and professional development. Candidates who may not meet every qualification but feel they are a good fit are encouraged to apply.

Benefits and Perks

• Participation in Employee Equity Bonus Plan to share ownership and success.
• Company-wide Christmas shutdown with additional paid leave days.
• One paid volunteer day annually to contribute to community service.
• Option to purchase an additional week of leave paid over the year.
• Allowance to work remotely from a different region or country up to 90 days annually.
• An annual pre-tax wellness bonus of $750 NZD.
• Fully funded health cover through Southern Cross Wellbeing 1 plan with optional family and add-ons coverage.
• Support for home office setup for remote or hybrid employees.
• Monthly communication allowance of $50 NZD for phone and internet expenses.
• Generous parental leave including up to 12 weeks full-pay top-up for primary caregivers and paid leave for secondary caregivers.
• Access to 24/7 confidential support for mental health and wellbeing globally via the Employee Assistance Program.
• Learning opportunities through internal workshops, reviews, and career development discussions.
• Recognition of tenure milestones with bonus leave and monetary rewards.
• Referral rewards of $2000 NZD pre-tax for successful hires.
• Access to salary sacrifice programs for bicycles and electric mobility devices.
• Employee support groups focused on diversity, equity, inclusion, environmental impact, and wellness.
• Work in a globally growing company accredited for diversity, carbon neutrality, and digital innovation committed to its mission and community impact.

Work Environment

The company embraces individuality, diversity, and flexible or remote working arrangements to foster creativity and motivate exceptional performance. Joining this team means becoming part of a purpose-driven organisation focused on making a positive difference.