Head of Security & Privacy

About the role

Education Perfect is seeking a senior leader to define and execute its information security, privacy and AI governance strategy. The Head of Security & Privacy will protect a cloud‑native SaaS platform used by millions of educators and students, ensuring compliance with global regulations while supporting rapid product innovation.

Key responsibilities

• Develop and own the Information Security Management System (ISMS), security policies and risk framework.
• Maintain ISO 27001 certification and align with frameworks such as ST4S.
• Act as Data Protection Officer, ensuring compliance with GDPR, New Zealand and Australian privacy laws.
• Oversee security architecture, vulnerability management, incident response and third‑party risk assessments.
• Manage the security and privacy risk register and report key risks to senior leadership and the board.
• Design and implement AI governance frameworks for responsible AI use.
• Lead security awareness training, business continuity planning, cyber‑insurance and external audit processes.
• Collaborate with engineering, product and operations to embed security and privacy into development lifecycles.

Required profile

• Proven experience leading security and privacy strategy in a cloud‑native or SaaS organisation.
• Strong leadership and ability to influence senior stakeholders across functions.
• Deep knowledge of ISO 27001 and related security standards.
• Relevant certifications such as CISSP, CISM, AIGP or AWS Certified Security – Specialty.

Required skills

• ISO 27001 implementation and audit.
• Cloud security architecture (AWS).
• Vulnerability management and incident response.
• DevOps and secure software development practices.
• AI governance and ethical AI frameworks.
• Risk management and business continuity planning.
• Third‑party vendor security assessments.