Job Opportunities API

Education Perfect is an EdTech platform designed to empower educators and amplify their impact in the classroom. We aim to enable teachers to personalise learning at scale with a range of powerful learning, assessment, and insights tools, helping them and their students reach their full potential. As an EPeep, you’ll work on projects that have a real impact on students' lives and have the freedom, support and resources you need to develop your skills and grow your career. We’re looking for an experienced Head of Security & Privacy to lead how we approach information security, privacy and AI governance across our organisation. In this role, you’ll shape the strategy that protects our platform, data and the millions of students and educators who rely on our products every day. Working closely with senior leadership and teams across engineering, product and operations, you’ll embed strong security and privacy practices into how we build and operate our platform while supporting innovation in a fast-growing, cloud-native edtech company. You’ll also play a key role in maintaining our ISO 27001 certification, strengthening our security posture and ensuring we continue to deliver trusted SaaS solutions to the education sector. What you will do Lead EP’s information security, privacy and AI governance strategy Own and maintain the Information Security Management System (ISMS), security policies and risk framework Maintain ISO 27001 certification and compliance with frameworks such as ST4S Ensure compliance with global privacy regulations including GDPR, the New Zealand Privacy Act and the Australian Privacy Act as EP’s data protection officer Oversee security architecture, tooling, vulnerability management and incident response Manage EP’s security and privacy risk register, reporting key risks to senior leadership and the board Develop and implement AI governance frameworks to support responsible and ethical AI use Lead vendor security and privacy assessments, including third-party risk management Drive security awareness and training programs across the organisation Manage external security audits and certification processes Lead business continuity planning, cyber insurance and risk reporting Partner with engineering, product and operations teams to embed security and privacy into our ways of working Act as a key point of contact for customers, regulators and government stakeholders on security and privacy matters About you Experience leading security and privacy strategy in a cloud-native or SaaS organisation Strong leadership skills with the ability to influence senior stakeholders and cross-functional teams Deep knowledge of ISO 27001 and related security frameworks Relevant certifications such as CISSP, CISM, AIGP or AWS Certified Security - Specialty are highly regarded Strong understanding of cloud security architecture (AWS) and modern application security practices Experience working with DevOps environments and secure software development practices Experience implementing security monitoring, alerting and incident response processes Strong knowledge of privacy regulations including GDPR and the New Zealand and Australian Privacy Acts Experience with data governance, classification, retention policies and lifecycle management Understanding of AI risks and governance frameworks, including issues such as bias, transparency and responsible use Experience conducting security risk assessments, audits and compliance programs Equitable opportunities, growth, and development lie at the heart of how we work at EP. We understand that not all applicants may possess all the following attributes so if you think you have what it takes, but are not sure you check every box, we would love to still hear from you! What we offer Employee Equity Bonus Plan: Be part of our success with equity bonuses that foster ownership and shared growth across the company Christmas Sh