Head of Security & Privacy

About the role

Education Perfect is seeking a senior leader to define and execute its information security, privacy and AI governance strategy. The Head of Security & Privacy will protect the platform, data and millions of users while enabling rapid innovation in a cloud‑native SaaS environment.

Key responsibilities

• Lead the development and implementation of the organisation’s security, privacy and AI governance roadmap.
• Own and maintain the Information Security Management System (ISMS), security policies and risk framework.
• Maintain ISO 27001 certification and ensure compliance with frameworks such as ST4S.
• Act as Data Protection Officer, ensuring compliance with GDPR, the New Zealand Privacy Act and the Australian Privacy Act.
• Oversee security architecture, vulnerability management, incident response and third‑party risk assessments.
• Manage the security and privacy risk register and report key risks to senior leadership and the board.
• Drive security awareness, training programmes and business continuity planning.
• Collaborate with engineering, product and operations to embed security and privacy into development and operational processes.

Required profile

• Proven experience leading security and privacy strategy in a cloud‑native or SaaS organisation.
• Strong leadership and influencing skills with senior stakeholders.
• Deep knowledge of ISO 27001 and related security frameworks.
• Relevant certifications such as CISSP, CISM, AIGP or AWS Certified Security – Specialty.

Required skills

• ISO 27001 implementation and audit
• Cloud security architecture (AWS)
• Vulnerability management and incident response
• DevOps and secure software development practices
• AI governance and ethical AI frameworks
• Risk management and third‑party security assessments

What we offer

• Opportunity to shape security for a fast‑growing global EdTech platform.
• Collaborative environment with senior leadership and cross‑functional teams.
• Support for professional development and industry certifications.