{"id":4216992,"url":"https://alion.io/job/powerschool-director-information-security-2","title":"Director, Information Security","company":{"id":20238,"name":"PowerSchool","domain":"powerschool.com","url":"https://alion.io/company/powerschool","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":95,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0.667,"time_to_fill_p50_days":12,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Plano, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-13T03:04:11Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-13T03:04:11Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Overview\nAbout PowerSchoolAt PowerSchool, we power education for students around the world. As the global leader in cloud-based K-12 software, we support the full education ecosystem-from the central office to the classroom to the home. Joining PowerSchool means being part of a mission-driven team that is transforming K-12 education by helping schools operate more effectively and deliver better outcomes for educators, students, and families.\nAbout the position\nThe Director of Cybersecurity Strategy and Governance reports directly to the CISO and serves as a senior advisor on cybersecurity strategy, governance, risk, and program execution. In partnership with the CISO and cybersecurity leaders, this role helps formulate enterprise cybersecurity strategy and drives coordinated execution by maintaining the consolidated cybersecurity roadmap, establishing the leadership planning and reporting cadence, managing cross-functional dependencies, and partnering closely with the business PMO. The Director leads the Governance, Risk, and Compliance organization, including cybersecurity risk management, compliance, policy and standards, third-party risk management, security awareness, ISO 27001 and SOC 2 audit coordination, customer security assurance, and security control governance. Working collaboratively with the leaders of security architecture, security engineering, security operations, Product, Legal, Privacy, and other business functions, the Director strengthens execution, enables risk-informed decisions, and prepares consolidated cybersecurity updates for the CISO and executive leadership while preserving each leader’s accountability and decision authority within their domain.\nResponsibilities\nDescription\nYour day-to-day job will consist of:\nWork with the CISO and other cybersecurity leaders to develop the company’s cybersecurity strategy and turn it into a clear roadmap. The roadmap will include major projects, operational improvements, audit fixes, risk reduction plans, and security investments.\nMaintain the cybersecurity roadmap. Set the rules for which work belongs on it, coordinate priorities and dependencies across security teams, and recommend solutions to the CISO when priorities conflict.\nPlan and lead regular cybersecurity leadership meetings for strategy, planning, progress reviews, and reporting. Track decisions and commitments, follow up on action items, and raise major delays or gaps to the CISO.\nServe as the main cybersecurity contact for the shared business PMO. Help turn security priorities into clear plans, milestones, dependencies, resource needs, and status updates.\nSet and enforce common standards for cybersecurity planning and reporting. Combine metrics and updates from security leaders, identify trends and risks across teams, and prepare updates for the CISO and executive leadership.\nLead the Governance, Risk, and Compliance organization. This includes security risk, compliance, policies and standards, third-party risk, security awareness, ISO 27001 and SOC 2 audits, customer security assurance, and security control governance.\nWork with security and business leaders to develop a common method for rating cybersecurity risk. Maintain the security risk register and support consistent risk reviews, priorities, treatment plans, and reporting.\nSet and maintain rules for accepting security risks and approving policy exceptions. Review requests, recommend decisions based on approved authority levels, and track accepted risks, exceptions, and required fixes.\nLead security control governance. Maintain the control framework, define control goals and evidence needs, monitor control coverage and fixes, and coordinate testing with Internal Audit, external auditors, and control owners.\nManage cybersecurity relationships with Internal Audit and external ISO 27001 and SOC 2 auditors. Coordinate audit schedules, evidence, interviews, findings, corrective actions, and certification milestones.\nMaintain security policies, compliance programs, third-party risk processes, security awareness programs, and customer security assurance services. Make sure these programs support business goals, legal duties, customer commitments, and ongoing improvement.\nWork closely with Security Architecture, Security Engineering, Security Operations, Product, Engineering, Legal, Privacy, and business leaders. Help them include governance and risk in business and technology decisions while they remain responsible for their own areas.\nDevelop the GRC team and build a culture of good judgment, technical knowledge, accountability, teamwork, and continuous improvement.\nQualifications\nMinimum Qualifications\nBachelor’s degree in Cybersecurity, Information Security, Information Systems, Risk Management, Business, or a related field.\n12 or more years of progressive cybersecurity experience, including leadership in strategy, governance, risk, compliance, audit, or related areas.\n7 or more years of experience leading cybersecurity, GRC, risk, compliance, audit, or security assurance teams.\nPrior substantive, hands-on experience in at least one cybersecurity field outside GRC, such as security architecture, security engineering, security operations, application or product security, or cloud security.\nExperience helping develop cybersecurity strategy and turning it into roadmaps, priorities, plans, and measurable results.\nExperience coordinating work across cybersecurity teams without direct authority over those teams, including managing dependencies, tracking commitments, and resolving or escalating conflicts.\nExperience building and improving enterprise cybersecurity risk, governance, compliance, policy, security awareness, third-party risk, or customer assurance programs.\nExperience with cybersecurity risk registers, risk-rating methods, treatment plans, risk acceptance, policy exceptions, and executive risk reporting.\nStrong knowledge of security controls and common frameworks and requirements, including NIST CSF, SSDF, ISO 27001, SOC 2, and FERPA.\nExperience coordinating internal and external audits, certification work, evidence collection, findings, and remediation tracking.\nAbility to combine cybersecurity metrics and program updates into clear reports for the CISO and executive leadership.\nStrong communication, judgment, and relationship skills, with the ability to work effectively with cybersecurity, Product, Engineering, Legal, Privacy, PMO, and business leaders.\nPreferred Qualifications\nRelevant certifications such as CISSP, CISM, CRISC, CISA, or ISO 27001 Lead Implementer or Lead Auditor.\nExperience in SaaS, cloud-native, education technology, or another highly regulated environment.\nExperience working with a shared business PMO to manage enterprise roadmaps, milestones, dependencies, and reporting.\nExperience leading ISO 27001 and SOC 2 programs and supporting customer audits, due diligence reviews, and security questionnaires. Experience with StateRAMP/GovRAMP a plus\nDemonstrated success building strong GRC teams and influencing senior leaders across a large, complex organization.\nCompensation & Benefits\nCompensation & Benefits\nAlong with our highly market competitive base compensation, PowerSchool offers the following benefits:\nComprehensive Insurance Coverage (including Medical, Dental, Vision, Pharmacy benefits, Life Insurance and AD&D)\n\nFlexible Spending Accounts and Health Savings Accounts\n\nShort-Term Disability and Long-Term Disability\n\nComprehensive 401(k) plan\n\nGenerous Parental Leave\n\nUnrestricted paid time off (known as Discretionary Time Off - DTO)\n\nWellness Program, including ClassPass & Employee Assistance Program\n\nTuition Reimbursement\n\nOptional Benefits: Pet Insurance, Identity Theft Protection, Student Debt Repayment Program and Prepaid Legal coverage\n\nEEO Commitment\nEEO Commitment\nPowerSchool is committed to a diverse and inclusive workplace. PowerSchool is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. Our inclusive culture empowers PowerSchoolers to deliver the best results for our customers. We not only celebrate the diversity of our workforce, we celebrate the diverse ways we work. If you have a disability and need an accommodation regarding our recruiting process, please let us know by emailing .","description_format":"text","description_chars":8457,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":7,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Insurance coverage","Life insurance","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["EdTech Platforms","Information Security","Learning Management Systems"],"lifecycle":[{"event":"open","at":"2026-11-13T03:04:11Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 7","filings_12m":7,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":167500,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":3}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":12,"reasons":["conf:1","win:early"],"computed_at":"2026-11-13T04:32:18Z"},"pay":null,"html_url":"https://alion.io/job/powerschool-director-information-security-2","json_url":"https://alion.io/job/powerschool-director-information-security-2.json","meta":{"generated_at":"2026-11-13T04:32:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9606,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":20238},"rest":"https://alion.io/mcp/rest/get_company?id=20238"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpowerschool-director-information-security-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpowerschool-director-information-security-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpowerschool-director-information-security-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/powerschool-director-information-security-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpowerschool-director-information-security-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4216992}},{"tool":"search_jobs","arguments":{"company":"powerschool.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4216992},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}