Director, Data Security & Compliance (Remote)

DataKind is looking for a Director, Data Security & Compliance!

DataKind is seeking a Director, Data Security and Compliance! This is a unique opportunity to expand a critical function that directly protects vulnerable populations and enables our mission-driven educational products to scale responsibly. The data security and compliance frameworks you implement will be foundational to our organization's ability to deliver life-changing educational tools while maintaining the highest standards of data protection. 

About the Opportunity

Reporting to the Vice President, Technology, this role will develop and implement a comprehensive data security strategy for DataKind, focusing on our enterprise education and communities platforms and products. In this critical role, you'll establish and oversee DataKind’s implementation of IS27001 to protect sensitive student data while ensuring compliance with regulations including FERPA, GDPR, SOC2, and other relevant standards. As our organization grows, you'll build our Data Security and Compliance from the ground up, creating and laying the groundwork for future expansion as our products scale.

For a data security professional seeking meaningful impact, this role offers the chance to apply specialized expertise in a mission-focused environment where your work directly safeguards student data and enables educational access. You will help lead data security strategy while working with a passionate team committed to making a difference through technology.

Location

Remote position available anywhere in the U.S. with working hours primarily between 8am-6pm Eastern Time.

Salary Range

The salary range is $150,000 - $170,000.

Actual salary within this range will be based on the candidate’s experience and an internal salary equity scan of active employee(s) with similar roles and experience. 

Core Responsibilities:

Data Security Implementation

• Finalize and execute a comprehensive data security strategy aligned with organizational goals, grant deliverables, and product roadmaps
• Design, implement and maintain data security infrastructure, policies, controls, and procedures across all product environments
• Create and manage security protocols including data access control, encryption, and data loss prevention
• Conduct regular data security assessments, vulnerability testing, and risk evaluations
• Implement data breach response procedures and lead incident investigations when necessary

Compliance Management

• Set up organization’s implementation of ISO27001 in preparation for a SOC2 audit 
• Ensure organizational adherence to education data privacy regulations including FERPA and GDPR
• Establish data governance policies that protect student information while enabling product functionality
• Monitor regulatory changes and update data security practices accordingly
• Maintain documentation needed for compliance verification and audits
• Build external partnerships with data security vendors and compliance consultants to extend capabilities

Cross-Functional Leadership

• Partner with engineering and product teams to integrate data security considerations into the development lifecycle
• Work closely with the Senior Director, Engineering to align data privacy requirements with technical initiatives
• Collaborate with Education Partnerships and Customer Success team members to address data security concerns from educational institutions and users
• Advise executive leadership on data risk management and resource allocation
• Educate staff across the organization on data protection best practices and compliance requirements
• Create a scalable data security and compliance function that can grow with organizational needs

Education-Specific Data Protection

• Develop specialized protocols for protecting student data in educational contexts
• Enable secure data sharing in compliance with educational privacy requirements
• Implement age-appropriate data security measures for student-facing applications
• Build security systems that accommodate the unique data handling needs of educational environments

Grant Management & Milestone Achievement

• Align data security planning and resource allocation with grant commitments and milestone requirements
• Make strategic decisions to prioritize security initiatives that fulfill grant obligations while advancing protection goals
• Establish KP