Vice President, Information Security

CredLens, a nonprofit subsidiary of Strada Education Foundation, is seeking an experienced VP, Information Security to lead our organization’s information security strategy and execution. This role is dedicated to ensuring the security, confidentiality, and integrity of CredLens’ data assets and information systems, including data submitted by credential issuers and training providers. The VP, Information Security will report to the Chief Technology Officer (CTO) and work closely with the Chief Privacy Officer / Associate General Counsel (CPO), as well as the broader Strada team to implement robust security measures, manage cybersecurity risks, and ensure compliance with all relevant information security regulations.

The successful candidate will play a critical role in safeguarding the confidentiality, integrity, and availability of the national data trust that CredLens is creating, operating at the highest ethical standards, ensuring that our mission to deliver actionable insights and power ongoing research for industry-based, professional, and workforce credentials is achieved securely and responsibly.

CredLens, established in 2024, is an independent corporate entity affiliated with Strada Education Foundation. Our mission is to build a nonprofit national data trust focused on verified outcomes for non-degree credentials. CredLens will deliver actionable insights and power ongoing research for industry-based, professional, and workforce credentials.

CredLens is designed to fill the data gap for non-degree credentials.  The attainment of these credentials is growing, but there is little to no data tracking their outcomes.  CredLens will offer tailored data analytics and visualizations to credential issuers, workforce training providers, philanthropic funding partnerships, and state system partnerships to support the continuous improvement of credential quality and to support informed funding and scaling decisions. 

• Information Security Strategy:
• Develop and implement a comprehensive information security strategy and roadmap aligned with CredLens’ mission and regulatory requirements.
• Collaborate with the CPO and CTO to ensure the protection and confidentiality of sensitive data.

• Leadership:
• Plan, recruit & manage the initial team of information security professionals at the appropriate scale for our mission.
• Manage external resources to achieve information security outcomes.
• Manage budget and spend across the information security domain.

• Compliance Oversight:
• Oversee compliance with relevant information security laws and regulations, including those related to data privacy and cybersecurity, ensuring alignment with Strada’s policies where applicable.
• Lead efforts to complete and maintain ISO 27001 certification, SOC 2 Reporting,  and other relevant security certifications as defined in the strategy.

• Risk Management:
• Identify, assess, and mitigate cybersecurity risks to protect CredLens’ data and information systems.
• Oversee regular security audits, vulnerability assessments, and risk management processes, reporting findings to the executive team.

• Incident Response:
• Develop and manage incident response protocols to effectively address security breaches or data breaches, coordinating closely with the CPO and CTO.

• Policy Development:
• Manage and enforce information security policies, procedures, and guidelines that ensure the protection of data and compliance with legal requirements.
• Ensure that security policies are communicated effectively across the organization and that all employees are trained in security best practices.

• Collaboration:
• Work closely with the Strada Managed Services teams including Legal, Finance, IT, & Legal to ensure that CredLens maintains alignment with Strada GRC requirements.
• Collaborate with external partners, vendors, and stakeholders to maintain a robust security posture.

• Technology Oversight:
• Oversee the selection, implementation, and management of security technologies and solutions.
• Ensure that CredLens’ information systems and data storage solutions are secure and meet all compliance standards.

• Ethical Standards:
• Uphold the highest ethical standards in the management of CredLens’ information security practices, promoting a culture of security awareness and responsibility throughout the organization.

• One or more relevant certifications such as CISSP, CCSP, CISM, CISA, CIPP, or CIPM.
• Bachelor’s degree in Information Security, Computer Science, or a related field preferred.
• Minimum of 10 years of experience in information security, with at least 5 years in a leadership role.
• Proven track record of developing and implementing successful security strategies in nonprofit, education, or data-focused organizations.
• Experience with achieving and maintaining ISO 27001 certification, SOC 2 reports or similar standards.
• Strong understanding of regulatory requirements and cybersecurity frameworks relevant to the education and nonprofit sectors.

• Strategic thinking with the ability to align security initiatives with organizational goals.
• Strong problem-solving skills and the ability to navigate complex cybersecurity environments.
• High level of accuracy and attention to detail in security documentation and compliance matters.
• Strong interpersonal and relationship-building skills.
• Excellent organizational and project management abilities.
• Commitment to ethical practices and integrity in all dealings.
• Ability to administer security services and systems.
• Ability to identify and troubleshoot cloud and SaaS systems and integration points; access SaaS API via CLI or other tools; and troubleshoot network connectivity issues (including, LAN, WAN, and VPN).
• Ability to develop and lead training for end-users and IT Staff including both written and live when needed.
• Ability to work flexible hours including offices across multiple time zones, including evenings and weekends (occasional 24/7 support may be required).
• Ability to learn new technologies and acquire new skills regularly.

• Commitment to DEI: Demonstrated commitment to diversity, equity, and inclusion.
• Collaborative Capabilities: Ability to cultivate and manage positive relationships with internal and external stakeholders.
• Personal Attributes: Thrives under pressure, mission-driven, operationally focused, excels in building relationships, and is a collaborative team player. Maintains a positive and energetic attitude. Demonstrates sound judgment and possesses impeccable character.

Travel Requirements

Willingness to travel as required to meet with stakeholders and attend relevant conferences and meetings, typically less than 10%

Mission and Values Alignment:

Committed to providing equitable pathways to opportunity through PSET, particularly for individuals who have faced significant barriers. Demonstrated alignment with CredLens' guiding values, commitment to building a strong and healthy workplace culture, and working in a collaborative environment.    

Strategy and Innovation Leadership:

Adept at operationalizing strategy and effectively communicating strategic endeavors within the organization and in external contexts, both verbally and in writing. Particular skill in designing annual plans, monitoring progress, and refining plans as needed. Adaptable with tolerance for ambiguity. Able to problem-solve and navigate varied viewpoints. Capacity to refine efforts based on evidence that change is needed. Ability to lead efforts to visualize and monitor change. Capability to see and support innovative ideas and opportunities across the organization, and to embed innovation within operational plans. Capabilities in taking the perspective of others and adapting an agenda and approach – toward a shared aim - accordingly.   

Strategic Problem Solving: 

Ability to effectively utilize a hypothesis-driven approach to problem solving, with effective quantitative and communication skills. Ability to take on broad-reaching and sometimes ambiguous questions while working collaboratively and cross-functionally with Strada team members across the organization.  

Execution and Operations Leadership:

Ability to translate innovative, strategic ideas into tangible, actionable steps, as well as to effectively monitor progress and partner with others on identifying improvements during implementation to increase the likelihood of successful execution.  

DEI Commitment:

Commitment and professional experience advancing diversity, equity, and inclusion within and organization, including incorporating stakeholder perspectives in the design, implementation, and evaluation of strategic efforts.    

Relationship Building and Collaborative Capabilities: 

Demonstrated ability to cultivate, grow, and manage positive, mutually beneficial relationships at all levels of an organization and with partners outside the organization. Strong communication, interpersonal and relationship management skills—including identifying and working through challenges—underscored by strong judgment and emotional intelligence. Proven collaborator, able to work with colleagues at all levels in the organization. 

Diversity, equity, and inclusion are central to CredLens' organizational vibrancy, employee experience, and mission. We strongly encourage applicants from people of color/the global majority, immigrant, bilingual, and bicultural individuals; people with disabilities, members of the LGBTQIA2S+  and gender nonconforming communities; and people with other diverse backgrounds and lived experiences. We believe every member on the team enriches our workplace by exposing us to a broad range of ways to understand and engage with the world, identify challenges, and discover, design, and deliver critical insights and solutions.