Director, Information Technology & Security (K12 Edtech)

Magic School; Denver (CO); Hybrid; USD 130,000 - 170,000; Full time

Benefits offered by this job

Unlimited time off

Employer-paid health insurance

Stock options

401k match

Wellness stipend

Dental and vision insurance

Job summary

Magic School is seeking a Director of IT & Security to lead and scale our information technology and security functions. You will manage infrastructure, incident response, and a SOC 2 program, while advising on strategic tech decisions in a fast-growing educational tech startup.

You will report to the Sr. Director of Operations and work in a hybrid model, with onsite Denver availability as needed for company tech support, board meetings, and related activities.

Qualifications

• 7+ years in information technology and security with startup project experience.
• Solid knowledge of security frameworks (SOC 2, NIST, ISO 27001) and EdTech regulations (FERPA, COPPA).
• Hands-on experience with identity and device management platforms (JumpCloud or Okta), scripting (Python), APIs, and cloud infrastructure (AWS).
• Proven ability to manage multiple high-impact projects with ownership and attention to detail.
• Excellent ability to simplify complex security topics and communicate across all levels of the organization.

Responsibilities

• Drive IT management including help-desk, policy development, and end-to-end onboarding/offboarding and access management.
• Oversee procurement, inventory tracking, and cost-effective equipment distribution; vendor management for SaaS and IT services.
• Lead AI and technology enablement; administer AI tools and train teams on secure use of tech.
• Manage a comprehensive security program aligned with SOC 2, NIST, ISO 27001 and EdTech regs (FERPA, COPPA).
• Create incident response plans, perform risk assessments, and drive security awareness across the organization.
• Own SOC 2 audit cycle, coordinating evidence collection and closing findings.
• Lead complex IT and security projects; drive device management, HR/finance/identity system integrations, migrations, and access audits.

Skills

IT Security

SOC 2 compliance

NIST

ISO 27001

Tools

JumpCloud

Okta

Python

AWS

Job description

WHO WE ARE:

MagicSchool is the premier generative AI platform for teachers. We’re just over 2 years old, and more than 7 million teachers from all over the world have joined our platform. Join a top team at a fast growing company that is working towards real social impact. Make an account and try us out at our website and connect with our passionate community on our Wall of Love.

As Director of Information Technology (IT) & Security, you will lead and scale our IT and information security functions, ensuring the systems and practices that power our work are reliable, secure, and scalable. You’ll inherit a solid foundation (centralized identity and access management, automated account provisioning, and an active SOC 2 program) and be accountable for maturing it as we grow. In this hands‑on, individual contributor role, you’ll manage everything from infrastructure to incident response while advising on strategic technology decisions.

You’ll report directly to the Sr. Director of Operations and play a critical role in shaping our operational backbone. This position is hybrid, with an expectation of working onsite one day per week. Availability onsite in Denver is required as needed for company technology support, including onsite visits, board meetings, and other related activities.

RESPONSIBILITIES

In this role, you will be responsible for driving to the following outcomes:

IT Management

• Manage a help‑desk, develop and enforce technology policies and procedures, and own end‑to‑end employee lifecycle IT processes, including onboarding, offboarding, and access management, in partnership with People Operations.
• Manage procurement of hardware and software, maintain accurate inventory tracking, and ensure timely, cost‑effective equipment distribution.
• Oversee vendor management across SaaS tools and IT services, including selection, negotiations, and renewals.
• Lead AI and technology enablement: administer our AI tools and train our team on the effective and secure use of technology.

Security Program Management

• Manage a comprehensive security program aligned with industry standards (SOC 2, NIST, ISO 27001) and EdTech regulations (FERPA, COPPA).
• Create and maintain incident response plans, conduct risk assessments, and drive security awareness across the organization.
• Own our SOC 2 audit cycle, partnering with teams across the company to gather evidence and close findings.

Project Execution

• Lead and execute complex IT and security projects, ensuring effective management and timely delivery in a fast‑paced startup environment.
• Own and drive initiatives such as device management, integrations between our HR, finance, and identity systems, system migrations, access control audits, and infrastructure scaling.

Cross-Functional Collaboration

• Collaborate closely with engineering, product, legal, People Operations, finance, and other teams to integrate security across all operations and communicate risks and strategies clearly to the organization.
• Serve as a trusted advisor on technology decisions that affect the broader business.

EXPERIENCE & QUALIFICATIONS

To be successful in this role, you’ll bring the following experience and qualifications:

• Professional Experience: At least 7 years of relevant experience in information technology and security, with proven experience executing complex projects in a startup environment.
• Compliance Expertise: Strong knowledge of security frameworks (SOC 2, NIST, ISO 27001) and EdTech regulations (FERPA, COPPA).
• Technical Depth: Hands‑on experience with identity and device management platforms (such as JumpCloud or Okta), scripting (Python preferred), APIs, and cloud infrastructure (AWS).
• Execution Skills: Demonstrated ability to manage multiple high‑impact projects with a high level of ownership and attention to detail.
• Communication Skills: Excellent ability to simplify complex security topics and communicate effectively across all levels of the organization.

Why Join Us?

• Work on cutting‑edge AI technology that directly impacts educators and students.
• Join a mission‑driven team passionate about making education more efficient and equitable.
• Flexibility of working from home, while fostering a unique culture built on relationships, trust, communication, and collaboration with our team - no matter where they live.

For full time employees:

• Unlimited time off to empower our employees to manage their work‑life balance. We work hard for our teachers and users, and encourage our employees to rest and take the time they need.
• Choice of employer‑paid health insurance plans so that you can take care of yourself and your family. Dental and vision are also offered at very low premiums.
• Every employee is offered generous stock options, vested over 4 years.
• 401k match & monthly wellness stipend.

Our Values:

• Educators are Magic: Educators are the most important ingredient in the educational process - they are the magic, not the AI. Trust them, empower them, and put them at the center of leading change in service of students and families.
• Joy and Magic: Bring joy and magic into every learning experience - push the boundaries of what’s possible with AI.
• Community: Foster community that supports one another during a time of rapid technological change. Listen to them and serve their needs.
• Innovation: The education system is outdated and in need of innovation and change - AI is an opportunity to bring equity, access, and serve the individual needs of students better than we ever have before.
• Responsibility: Put responsibility and safety at the forefront of the technological change that AI is bringing to education.
• Diversity: Diversity of thought, perspectives, and backgrounds helps us serve the wide audience of educators and students around the world.
• Excellence: Educators and students deserve the best - and we strive for the highest quality in everything we do.