Head of Security & Privacy

About the role

Education Perfect is seeking a senior leader to define and execute its information security, privacy and AI governance strategy. You will protect a cloud‑native SaaS platform used by millions of educators and students, while ensuring compliance with global regulations and supporting rapid product innovation.

Key responsibilities

• Develop and own the Information Security Management System (ISMS) and related policies.
• Maintain ISO 27001 certification and align with frameworks such as ST4S.
• Act as Data Protection Officer, ensuring compliance with GDPR, the New Zealand Privacy Act and the Australian Privacy Act.
• Oversee security architecture, vulnerability management, incident response and third‑party risk assessments.
• Lead AI governance initiatives to promote responsible and ethical AI use.
• Manage the security and privacy risk register and report key risks to senior leadership and the board.
• Drive security awareness, training programs and business continuity planning.
• Serve as the primary contact for customers, regulators and government stakeholders on security and privacy matters.

Required profile

• Proven experience leading security and privacy strategy in a cloud‑native or SaaS environment.
• Strong leadership and influencing skills across senior and cross‑functional teams.
• Deep knowledge of ISO 27001 and related security frameworks.
• Relevant certifications (e.g., CISSP, CISM, AIGP, AWS Certified Security – Specialty) are highly regarded.

Required skills

• ISO 27001 implementation and compliance.
• Cloud security architecture on AWS.
• Vulnerability management and incident response.
• AI governance frameworks.
• DevOps and secure software development practices.

What we offer

• Opportunity to shape security strategy for a fast‑growing EdTech platform.
• Collaborative environment with senior leadership and cross‑functional teams.
• Support for professional development and industry certifications.