Head of Information Security

Responsibilities

We are representing a confidential edtech organization seeking a Head of Information Security to expand and lead their security function across four critical domains: application security, security compliance, infrastructure and cloud security, and business application security. This is a hands-on leadership role where you'll inherit a small existing team with a mandate to grow as the organization scales.

Application Security

• Build and run the AppSec program, including AI-assisted security reviews of code and pull requests
• Integrate security checks into CI/CD pipelines to catch vulnerabilities before production
• Run developer security training and champion secure coding practices organization-wide
• Evaluate and roll out AI coding tools in ways that enhance, not undermine, code security

Security Compliance

• Own ISO 27001 and SOC 2 certification and ongoing security audits
• Collect requirements from stakeholders and build a roadmap for additional certifications as the business requires them
• Maintain policies, controls, and evidence in a way that scales without slowing teams down

Infrastructure and Cloud Security

• Work closely with DevOps to secure Kubernetes infrastructure and cloud environments, including sovereign cloud deployments
• Define security standards for infrastructure-as-code, network architecture, and access control
• Partner with engineering teams on secure-by-default configurations

Business Application Security

• Work with IT and business application teams to secure Microsoft 365 and other line-of-business systems, including CRM and ERP
• Own identity, access, and data protection controls across business applications
• Manage third-party and vendor risk for business-critical SaaS

What We're Looking For

• 8+ years in information security, including 3+ years in a leadership role, preferably in all-remote or hybrid international organizations
• Track record running application security programs, ideally with CI/CD-integrated tooling and modern AI-assisted code review
• Hands-on experience with ISO 27001 and/or SOC 2, with proven experience leading and successfully completing audits
• Experience securing business applications (M365, CRM, ERP) and vendor risk management
• Ability to explain risk and trade-offs clearly to both engineers and executives
• Comfortable operating with a small team and prioritizing across competing demands
• Working knowledge of Kubernetes and cloud security; sovereign cloud experience is a plus

You'll set direction and represent security to leadership while digging into technical details with engineering, IT, and compliance teams.

How We Work With You

Our talent team at Get A Job.ai will guide you through the entire process. When you apply through our platform, a recruiter will screen your background and prepare you for submission to our client. We then represent you throughout interviews and negotiations. Please do not contact the employer directly—all communication flows through Get A Job.ai to ensure the best candidate experience.

Pay

Compensation details will be discussed during the screening process with our recruiting team.

Equal Opportunity: Get A Job.ai is committed to inclusive hiring practices. We welcome applications from candidates of all backgrounds and identities and evaluate every applicant based on qualifications and fit for the role.