Vice President, Information Security

CredLens, a nonprofit subsidiary of Strada Education Foundation, is seeking an experienced VP, Information Security to lead our organization’s information security strategy and execution. This role is dedicated to ensuring the security, confidentiality, and integrity of CredLens’ data assets and information systems, including data submitted by credential issuers and training providers. The VP, Information Security will report to the Chief Technology Officer (CTO) and work closely with the Chief Privacy Officer / Associate General Counsel (CPO), as well as the broader Strada team to implement robust security measures, manage cybersecurity risks, and ensure compliance with all relevant information security regulations.
The successful candidate will play a critical role in safeguarding the confidentiality, integrity, and availability of the national data trust that CredLens is creating, operating at the highest ethical standards, ensuring that our mission to deliver actionable insights and power ongoing research for industry-based, professional, and workforce credentials is achieved securely and responsibly.
CredLens, established in 2024, is an independent corporate entity affiliated with Strada Education Foundation. Our mission is to build a nonprofit national data trust focused on verified outcomes for non-degree credentials. CredLens will deliver actionable insights and power ongoing research for industry-based, professional, and workforce credentials.
CredLens is designed to fill the data gap for non-degree credentials.  The attainment of these credentials is growing, but there is little to no data tracking their outcomes.  CredLens will offer tailored data analytics and visualizations to credential issuers, workforce training providers, philanthropic funding partnerships, and state system partnerships to support the continuous improvement of credential quality and to support informed funding and scaling decisions. 

Key Responsibilities

• Information Security Strategy:
• Develop and implement a comprehensive information security strategy and roadmap aligned with CredLens’ mission and regulatory requirements.
• Collaborate with the CPO and CTO to ensure the protection and confidentiality of sensitive data.


• Leadership:
• Plan, recruit & manage the initial team of information security professionals at the appropriate scale for our mission.
• Manage external resources to achieve information security outcomes.
• Manage budget and spend across the information security domain.


• Compliance Oversight:
• Oversee compliance with relevant information security laws and regulations, including those related to data privacy and cybersecurity, ensuring alignment with Strada’s policies where applicable.
• Lead efforts to complete and maintain ISO 27001 certification, SOC 2 Reporting,  and other relevant security certifications as defined in the strategy.


• Risk Management:
• Identify, assess, and mitigate cybersecurity risks to protect CredLens’ data and information systems.
• Oversee regular security audits, vulnerability assessments, and risk management processes, reporting findings to the executive team.


• Incident Response:
• Develop and manage incident response protocols to effectively address security breaches or data breaches, coordinating closely with the CPO and CTO.


• Policy Development:
• Manage and enforce information security policies, procedures, and guidelines that ensure the protection of data and compliance with legal requirements.
• Ensure that security policies are communicated effectively across the organization and that all employees are trained in security best practices.


• Collaboration:
• Work closely with the Strada Managed Services teams including Legal, Finance, IT, & Legal to ensure that CredLens maintains alignment with Strada GRC requirements.
• Collaborate with external partners, vendors, and stakeholders to maintain a robust security posture.


• Technology Oversight:
• Oversee the selection, implementation, and management of security technologies and solutions.
• Ensure that CredLens’ information systems and data storage solutions are secure and meet all compliance standards.


• Ethical Standards:
• Uphold the highest ethical standards in the management of CredLens’ information security practices, promoting a culture of security awareness and responsibility throughout the organization.

The Person: Qualifications and Experience

• One or more relevant certifications such as CISSP, CCSP, CISM, CISA, CIPP, or CIPM.
• Bachelor’s degree in Information Security, Computer Science, or a related field preferred.
• Minimum of 10