Head of Privacy & Security
Playlab · Remote · Remote ·
COMPENSATION
$200k – $250k
Listed on the employer's job board (Ashby)
- Fully remote
- Head of Security
- Non-profit mission
- AWS + Kubernetes
- GDPR + SOC 2
Playlab is a tech non-profit empowering educators and students to build custom AI applications. As Head of Privacy & Security, you will own end-to-end risk management and customer assurance, driving the maturity of security and privacy programs as the organization scales.
You will lead a small team, oversee SOC 2 and GDPR compliance, and implement security automation. The role requires balancing security controls with engineering velocity while safeguarding educational data for users worldwide.
What you'll do
- Expand SIEM and detection pipelines to investigate anomalies before incidents occur
- Standardize RBAC on critical systems including AI agent identities
- Integrate LLM-assisted code analysis into security-relevant pull requests
- Design data de-identification approaches for privacy-by-design use cases
- Lead GDPR compliance efforts to support expansion into the EU market
- Hire and grow the Privacy and Security team over the next six months
- Maintain an up-to-date risk register and communicate security roadmap updates
- Conduct secure design reviews with actionable recommendations for engineers
- Lead SOC 2 compliance operations and audits to reduce engineering overhead
- Manage incident response functions to ensure rapid recovery capabilities
- Partner with Trust and Safety on child safety and responsible AI deployments
What you'll need
- Seven or more years in security roles with at least three in leadership
- Experience implementing security controls in fast-moving engineering organizations
- Proven track record in AppSec challenges and DevSecOps integration
- Expertise in securing container-based cloud environments on AWS EKS
- Knowledge of IAM, virtual network security, logging, and auditing
- Experience leading GDPR compliance and SOC 2 audits
- Excellent writing and communication skills for building consensus
Nice to have
- Background in education data privacy regulations like FERPA or COPPA
- Experience defending systems against AI threats such as prompt injection
- Prior work in nonprofit or mission-driven organizations
Stack
- AWS
- Kubernetes
- Terraform
- GitHub
- Google Workspace
- Vanta
- Linear
- OpenAI
- Anthropic
- Vercel
How you'll work
- Remote-first environment with autonomy
- Strong culture of collaboration
What you get
- Competitive salary package
- Healthcare coverage
- Retirement plan contributions
- Generous time off policy
- Opportunities for professional growth