VP, Information Security & Privacy Strategy

Strada Education; Washington (District of Columbia); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Health insurance

PTO and holidays

401(k) plan

Parental leave

Wellness reimbursement

Professional development

Job summary

CredLens, a nonprofit national data trust, seeks an experienced Information Security Leader to run day-to-day security programs at national scale. Reporting to the CTO and working with the VP, Legal and Data Protection, you will oversee SOC 2 Type II, ISO 27001/27018, TX-RAMP readiness, and privacy-enhancing technologies strategy.

You will lead a small core team plus partners, manage audits, incident response, and board reporting, and shape privacy-by-design across data-partner ecosystems,

Qualifications

• Bachelor's degree required; capability and learning agility valued over field.
• One or more of CISSP, CCSP, CISM, CISA, CIPP, or CIPM.
• 10+ years in information security, including 5+ years leading a security program.
• Proven ability to maintain SOC 2 Type II and ISO 27001 through multiple audits.
• Hands-on security leadership in cloud-native AWS environment.
• Incident commander experience with tabletop exercises and breach notification.
• Experience protecting highly sensitive personal data under regulatory constraints.
• Customer-facing security experience: trust centers and security questionnaires.
• Experience managing third-party risk and security vendors.
• Experience presenting risk to a board or governance committee.

Responsibilities

• Run security operations, compliance, and controls assurance; maintain audit-ready program.
• Oversee cloud security posture across AWS and Snowflake; manage data enclave and IAM.
• Lead privacy-enhancing technologies strategy and PETs roadmap.
• Drive growth by enabling faster customer security reviews and trust Center management.
• Governance, risk, and board reporting; prepare quarterly retrospectives and risk assessments.
• Build the team and manage partners for audits, pen tests, and secure reviews.

Skills

Information security leadership

Incident commander

Cloud security AWS

Privacy by design

NIST 800-53

Governance & risk

Board reporting

Third-party risk

Security questionnaires

DevSecOps coordination

Education

Bachelor's degree

CISSP

CCSP

CISM

CISA

CIPP

CIPM

Tools

AWS

Snowflake

GRC tooling

Job description

CredLens, a nonprofit national data trust, seeks an experienced Information Security Leader to run day-to-day security programs at national scale. Reporting to the CTO and working with the VP, Legal and Data Protection, you will oversee SOC 2 Type II, ISO 27001/27018, TX-RAMP readiness, and privacy-enhancing technologies strategy.

You will lead a small core team plus partners, manage audits, incident response, and board reporting, and shape privacy-by-design across data-partner ecosystems,