Fast Facts

Discovery Education is hiring a VP, Chief Information Security Officer to lead and enhance their information security and compliance programs, driving strategic initiatives and ensuring organizational security in a complex environment.

Responsibilities: The candidate will develop a comprehensive security strategy, oversee IT security operations, manage risk and compliance, handle vendor assessments, lead incident response, and foster a security culture within the organization.

Skills: Candidates must have a strategic mindset, strong collaboration skills, and expertise in cloud-native environments, SaaS security, and regulatory frameworks relevant to education and technology sectors.

Qualifications: Preferred qualifications include 10+ years in information security leadership, familiarity with ISO 27001 and SOC 2 certifications, advanced degrees or relevant certifications, and experience within EdTech or regulated industries.

Location: This position is based in Charlotte, NC, USA with a hybrid work schedule.

Compensation: Not provided by employer. Typical compensation ranges for this position are between $180,000 - $250,000.

Discovery Education is seeking an experienced and strategic VP, Chief Information Security Officer to lead the continued maturation, implementation, and continuous improvement of our enterprise-wide information security and compliance programs. The person in this role will be responsible for protecting our corporate systems, customer-facing products, data assets, and brand reputation in an increasingly complex global environment. 

The ideal candidate will bring a balanced blend of strategic leadership, technical expertise, and business acumen, ensuring security is both a foundation of trust and an enabler of innovation at Discovery Education. 

In This Role You Will: 

Security Strategy & Governance

• Develop and execute a comprehensive information security strategy aligned with business goals and regulatory requirements.
• Establish governance frameworks and policies to ensure consistent and effective security practices.

Enterprise & Product Security

• Oversee IT security operations, including network security, endpoint protection, identity and access management, and disaster recovery.
• Integrate security principles across the product development lifecycle, including secure coding, vulnerability management, and incident response.

Risk & Compliance Management

• Lead programs to achieve and maintain compliance with ISO 27001, SOC 2, FERPA, COPPA, GDPR, and other relevant standards.
• Conduct risk assessments and implement mitigation strategies across the organization.

Vendor & Third-Party Management

• Oversee third-party risk assessments and ensure vendors meet security requirements.
• Collaborate with Legal, IT, and Business Systems teams to manage vendor relationships.

Incident Response & Crisis Management

• Lead proactive incident response planning and real-time management of security events.
• Develop and maintain crisis communication protocols.

Data Privacy & Protection

• Partner with Legal, Product, Engineering, and Data teams to uphold global data privacy standards.
• Implement governance practices for data protection.

Security Awareness & Education

• Promote a strong security culture through training, simulations, and executive tabletop exercises.

Leadership & Collaboration

• Lead and develop a high-performing security team.
• Partner with IT, Engineering, Legal, and Product Management to embed security into business operations.

Customer & Stakeholder Engagement

• Respond to customer security inquiries and support audits and contract reviews.
• Provide clear, actionable updates to executives and board-level stakeholders

Core Competencies for Success: 

• Strategic Mindset
• Drives Results
• Collaborates
• Manages Complexity
• Builds Effective Teams
• Communicates Effectively
• Instills Trust
• Tech Savvy

Credentials and Experience: 

• 10+ years of experience in information security leadership roles.
• Proven expertise in cloud-native environments (AWS preferred), SaaS security, and modern software development.
• Deep understanding of regulatory frameworks relevant to the education and technology sectors.
• Strong communication skills with the ability to translate technical issues into business impacts.
• Experience leading audits and certifications (ISO 27001, SOC 2 Type II).
• Bachelor’s degree in Computer Science, Information Security, or related field; advanced degree or certifications (CISSP, CISM, CISA) preferred.
• Legal right to work in the United States
• Experience in K-12, EdTech, SaaS, or regulated industries.
• Familiarity with Microsoft Security Stack (Defender, Sentinel) and Hyperproof or similar compliance tools.
• Knowledge of AI-related security threats and mitigation strategies.
• M&A analysis experience.
• High integrity, ownership, and accountability.

This role will sit in our Charlotte HQs with a hybrid work schedule.