Vice President, Information Security

Strada Education Foundation

. Run the information security management system, including continuous control monitoring, vulnerability management, access reviews, external-transfer approvals, vendor assessments, policy upkeep, and security/data-handling training .

Posted 10/23/2026full-timeUnited StatesLead💰 $201,300 - $222,850 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing information security programs, including maintaining SOC 2 Type II and ISO 27001 certifications, incident response leadership, and cloud security management in AWS environments. Proven ability to engage with executive governance and manage third-party risk while ensuring compliance with regulatory standards.

Highest-signal resume keywords

SOC 2 Type II Certification ManagementAWS Cloud Security ManagementIncident Response LeadershipThird-Party Risk ManagementCISSP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementContinuous Control MonitoringData MinimizationPrivacy-Preserving TechnologiesPenetration TestingIdentity And Access ControlsDisaster RecoveryAudit AccountabilitySecurity Program MaturityData Protection Compliance

Soft Skills

Clear CommunicationStrategic JudgmentCollaborative Workplace CultureCommercial AwarenessComfort With Ambiguity

Tools & Technologies

SnowflakeNIST 800-53GovRAMPStateRAMPAI Governance FrameworksDevSecOps ToolsTrust Center ManagementCyber Insurance ManagementLogging ToolsSecurity Questionnaire Management

Certifications & Qualifications

CISSPCCSPCISMCISACIPPCIPM

Industry Keywords

Information Security ManagementPrivacy RegulationsFERPA ComplianceEdTechData-Partner AgreementsCyber GovernanceDigital Credentials CommonsIncident CommanderAudit RelationshipsSecurity Risk Presentation

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Run the information security management system, including continuous control monitoring, vulnerability management, access reviews, external-transfer approvals, vendor assessments, policy upkeep, and security/data-handling training
Maintain SOC 2 Type II, ISO 27001, ISO 27018, and TX-RAMP certifications without major findings
Manage auditor, penetration-test, internal-audit, and privacy-assessment relationships and annual re-test calendar
Serve as incident commander; own incident response, tabletop exercises, disaster recovery/business continuity exercises, notification commitments, and corrective actions
Oversee AWS and Snowflake cloud security, including the PII enclave, account separation, identity and access controls, logging, and backup integrity
Set the multi-year privacy-enhancing technologies strategy, including tokenization, privacy-preserving record linkage, and encryption of sensitive fields
Partner with the CTO, VP Legal and Data Protection, and Technology and Security Advisory Board on roadmap, agreements, pilots, and method selection
Advance data minimization and extend independent assurance to privacy
Own the Trust Center, HECVAT and questionnaire responses, and customer security reviews
Manage data-partner security relationships and third-party risk
Lead NIST 800-53 gap assessment and GovRAMP/StateRAMP readiness
Support DCUA onboarding and embed security and privacy requirements in agreements
Prepare and present quarterly reporting to the CredLens Board and staff the Cyber Governance Committee
Engage the Technology and Security Advisory Board semi-annually
Represent CredLens in Strada's NIST CSF assessment and enterprise risk review
Own AI governance, including responsible-use frameworks, AI vendor security reviews, and enterprise AI workspace controls
Lead and develop the DevSecOps Engineer; plan security staffing, budget, and spend
Manage specialist partners for audit, penetration testing, secure code review, internal audit/GRC, forensics, and cyber insurance
Run the security program for Digital Credentials Commons and advise Strada Education Foundation on its SOC 2 Type II program

Requirements

What you’ll need

Bachelor's degree; field of study not specified
One or more of: CISSP, CCSP, CISM, CISA, CIPP, or CIPM
10+ years in information security
5+ years leading a security program with budget, staffing, and audit accountability
Track record operating and maturing a certified program, including maintaining SOC 2 Type II and ISO 27001 through multiple audit cycles
Hands-on security leadership in a cloud-native AWS environment, including account architecture, identity and access, logging, and continuous control monitoring tooling
Incident commander experience, including tabletop exercises, severity-based response, breach notification, and retrospectives
Experience protecting highly sensitive personal data under contractual and regulatory constraints, such as FERPA, state breach-notification laws, and data-partner agreements
Customer-facing security experience with trust centers, security questionnaires, and due-diligence conversations with institutional buyers
Experience managing third-party risk and specialist security vendors
Experience presenting security risk and program status to a board or executive governance committee
Demonstrated alignment with CredLens' guiding values and commitment to collaborative workplace culture
Nice to have: advanced degree; PETs; TX-RAMP, StateRAMP, GovRAMP, NIST 800-53, and NIST CSF; application/product security tooling and DevSecOps; EdTech, education, workforce development, or data-platform background; startup, growth-stage, or nonprofit player-coach experience; AI governance experience
Operator mindset, technical depth, strategic judgment, clear communication, commercial awareness, sound judgment, and comfort with ambiguity

Benefits

Comp & perks

Medical, dental, and vision insurance
Generous PTO and paid holidays
401(k) retirement plan with employer contributions
Paid parental leave
Wellness reimbursement
Professional development resources
10% travel opportunity/requirement