Head of IT, Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Head of IT and Security owning identity, compliance, IT, and application security. Protecting OpenEd’s education platform and data for over 100,000 students.
Responsibilities:
- Own IT, identity, and compliance programs end to end
- Manage SSO/SAML, MFA, provisioning, least-privilege access, and onboarding/offboarding
- Own endpoint/MDM, SaaS and vendor risk, phishing and awareness, and incident response playbooks
- Drive SOC 2 Type II readiness, map FERPA/COPPA/state privacy controls, and own audits
- Contribute to application security initiatives including SAST/DAST/SCA in CI
- Triage vulnerabilities and drive remediation with engineers
- Run external penetration-test audits
- Establish security strategy, select tooling, and determine program sequencing
- Partner with engineering, IT, and legal
- Report directly to the CTO
Requirements:
- 6+ years in security, ideally in a regulated vertical (finance, education, healthcare)
- Hands-on experience across IT/identity and security operations
- Experience taking an organization through SOC 2 or ISO 27001
- Experience establishing and driving human-centered security processes
- Strong risk judgment
- Deep technical expertise and excellent communication skills
- Experience designing or running a zero-trust environment
- Bonus: Edtech/FERPA/privacy background, CISSP, or OSCP
- Must be authorized to work in the United States
- Must answer visa sponsorship requirement during application
Benefits:
- Bonus offered
- Remote work arrangement
Similar Jobs
Senior Manager, Global Security Technology
Global Security Technology leader shaping strategy, platforms, and modernization. Managing enterprise security projects, vendors, budgets, and global capability delivery for Johnson & Johnson healthcare operations.
Industry Sales Director – Security, Surveillance & Video Connectivity
Industry Sales Director driving enterprise sales, account expansion, and partner growth for Webbing’s global cellular connectivity platform. Owning the Security & Video vertical worldwide.
Senior Information Security Engineer
Senior Security Engineer owning KPA’s enterprise security platforms, cloud, identity, and automation. Improving security across workplace-safety software, infrastructure, DevOps, and compliance environments.
Senior Software Engineer, Security
Security engineer building automated application and infrastructure security for Flex’s AI-native private bank. Protecting money movement, cloud access, vulnerability management, and secure development at scale.
Chief Information Security Officer – CISO
CISO leading cybersecurity strategy, operations, risk, and resilience for Sydney Airport’s critical aviation infrastructure. Advising executives and the Board while developing high-performing security teams.
Information Security Program Manager
Information security program manager managing U.S. customer portfolios for Cofense, a phishing defense company. Delivering simulated phishing programs, remediation reporting, and security guidance.
Information Security Specialist – SoD Governance, Segregation of Duties
Especialista em segurança da informação governando SoD, IAM e RBAC na Avvale. Mitigação de riscos de acesso e conformidade para soluções empresariais inovadoras e sustentáveis.
Principal Security Engineer
Principal Security Engineer governing Fortive’s multi-cloud, AI, GitHub, and security architecture. Advising executives and leading enterprise technology strategy, governance, security, and modernization.
Security Engineering Lead
Security Engineering Lead building Product Security for Attio’s AI-native CRM. Securing customer data, leading incident response, and hiring the security team.
Security Engineering Lead
Security Engineering Lead building Attio’s Product Security function for its AI-native CRM platform. Leading application security, incident response, and security team growth.
Senior Cloud Security Engineer
Senior Cloud Security Engineer securing Omilia’s AWS conversational AI platform. Automating Terraform, GitOps, CI/CD, and cloud compliance across distributed engineering teams.
Consultor Sailpoint ISC – Identity Security Cloud
Consultor SailPoint ISC en Devoteam, consultora europea de estrategia digital y ciberseguridad. Despliegue, integración y evolución de soluciones Cyber IAM para clientes.
Senior Security Engineer – AI Focus
Senior Security Engineer securing AI/ML systems for Euna Solutions, a cloud-based public-sector software provider. Driving AI security, automation, governance, and compliance across the development lifecycle.
Senior Security Engineer – AI Focus
Senior Security Engineer securing AI/ML systems at Euna Solutions, a cloud software provider for public-sector organizations. Driving AI security automation, governance, compliance, and secure development practices.
R&D Cybersecurity Engineer
Sentar cybersecurity engineer supporting DLA research and development efforts. Administering Okta infrastructure, operational systems, networking, automation, maintenance, and user support.
Visiting Professor, Cybersecurity
Online cybersecurity professor teaching undergraduate and graduate students at DeVry University. Developing course materials, assessing learning, and integrating responsible AI and applied security practices.
Principal Information Security Engineer
Principal Information Security Engineer securing ASRC Federal’s DSOP platform for the U.S. Department of Defense. Assessing Kubernetes and containers, managing vulnerabilities, and integrating zero-trust controls across DevSecOps environments.
Cyber Security Engineer
Cyber Security Engineer building automated security capabilities for Interact’s enterprise intranet platform. Improving Splunk, cloud controls, and incident response through engineering and automation.
IT Cybersecurity Auditor
Cybersecurity Auditor conducting risk-based IT, security, and compliance audits for DiXiO, a global SWIFT financial messaging expert network. Assessing controls and reporting findings to clients.
IT Security Engineer
IT Security Engineer safeguarding sensitive healthcare information for Legacy Community Health, a Southeast Texas federally qualified health center. Monitoring threats, assessing risks, and strengthening Microsoft cloud and infrastructure security.