Information Security, Director

About Panorama:
Panorama Education is a fast-growing technology company partnering with K-12 school districts to help students succeed in the classroom and beyond. Today, 2,000 districts serving 15 million students across all 50 states rely on our secure, research-backed platform for AI, student support, and community voice and engagement. We also provide professional development and hands-on support to help schools to achieve their strategic goals and improve student outcomes. When you join Panorama, you become part of a mission-driven team making a real impact for students every day.

Panoramians can choose to work fully remote anywhere within the Continental United States.

About the Role:

Every day, teachers, principals, and school district leaders nationwide use Panorama’s platform to improve student outcomes across academics, family engagement, attendance, well-being, and college-career readiness. As a result, Panorama is the fastest growing platform in K-12 education, and 1 in 4 American students attends a school that has adopted Panorama.

Panorama is seeking a Information Security DIrector to lead and continuously improve our security program. This role sits at the intersection of policy, compliance, engineering, client enablement, and business risk management. The position requires a thoughtful, strategic, and hands-on professional who can manage competing priorities, adapt to shifting client expectations, and ensure Panorama continues to earn and maintain the trust of school districts nationwide.

In this mission-driven environment centered on equity and student outcomes, you’ll play a pivotal role in shaping the evolving security posture of an AI-forward company serving enterprise-level education clients. This highly cross-functional role provides broad organizational visibility, influence, and ownership of a security program that is both mature and evolving, with meaningful connections to teams across Sales, Client Success, Legal, IT, and Engineering.

Responsibilities:

• Own and evolve Panorama’s security program, ensuring high standards across compliance, vendor and tool reviews, secure operational practices, incident response, and documentation.
• Maintain and renew existing certifications, such as SOC 2 Type 2, while preparing for future certifications, including support for associated activities such as cyber insurance renewals, policy updates, audit evidence gathering, and internal assessments.
• Own Panorama’s security posture representation in client-facing materials such as RFPs, procurement checklists, and due diligence questionnaires—scaling up to lead more involved efforts such as third-party penetration testing when required by strategic accounts.
• Create and maintain clear, externally consumable summaries of our security practices, helping Sales and Client Success accelerate deals and retain client confidence.
• Equip senior leaders with a clear view of security posture and progress by synthesizing operational data—including KPIs—into briefings that support planning, prioritization, and investment decisions.
• Refine and execute processes for secure evaluation of new vendors, integrations, AI applications, browser extensions, and system-level tools—ensuring thoughtful adoption of tools while preserving a strong security posture.
• Guide Panorama’s secure and responsible use of AI, including product integrations, employee tools, and external messaging around security implications.
• Sustain Panorama’s strong international compliance posture, particularly around client-specific data residency requirements.
• Lead annual security awareness training and other internal enablement activities to promote a security-conscious culture and behavior across the organization.
• Continuously review and improve internal security policies and practices to stay aligned with client expectations, compliance standards, and industry best practices.

Our Ideal Candidate Has:

• 3+ years of experience in information security roles, including responsibility for audits, vendor reviews, and program-level decisions.
• Expertise in Platform and Application Security with strong GRC, Security Operations, and Enterprise Security experience.
• Extensive knowledge of information security, including deep expertise in security policy, risk management, vulnerability management, incident response, and compliance regulations.
• General knowledge of FERPA, PPRA, and COPPA.
• Experience preparing organizations for SOC2.
• The ability to learn quickly and hit the ground running.
• Strong communication skills.
• Demonstrated desire to be a continuous learner.

The starting base salary for this positi