Ionic Partners

• Lead customer security reviews, RFPs, RFIs, and questionnaires, turning around accurate, complete responses fast enough to keep deals moving • Stand up and maintain a customer-facing trust portal (SafeBase / Vanta / Drata or equivalent), including a dedicated AI/ML section • Own SOC 2 Type II program management, driving audits across portfolio companies (including Sparkrock's Type II conversion and CXT scoping), coordinating evidence with the Senior Group Security Engineer, and managing auditor relationships • Author and maintain security policies and documentation, including DPAs, sub-processor lists, and incident-communication templates • Own AI compliance and trust, including AI questionnaire responses, AI sub-processor management, framework tracking (EU AI Act, ISO 42001, NIST AI RMF), AI use disclosure, AI acceptable-use policy, and AI incident-comms playbooks • Run third-party vendor security reviews and renewals • Build and deliver internal security awareness training, and onboard customers through the required security setup • Draft and coordinate customer-facing incident communications, including breach/incident notifications with legal and engineering

• Lead customer security reviews, RFPs, RFIs, and questionnaires, turning around accurate, complete responses fast enough to keep deals moving • Stand up and maintain a customer-facing trust portal (SafeBase / Vanta / Drata or equivalent), including a dedicated AI/ML section • Own SOC 2 Type II program management, driving audits across portfolio companies (including Sparkrock's Type II conversion and CXT scoping), coordinating evidence with the Senior Group Security Engineer, and managing auditor relationships • Author and maintain security policies and documentation, including DPAs, sub-processor lists, and incident-communication templates • Own AI compliance and trust, including AI questionnaire responses, AI sub-processor management, framework tracking (EU AI Act, ISO 42001, NIST AI RMF), AI use disclosure, AI acceptable-use policy, and AI incident-comms playbooks • Run third-party vendor security reviews and renewals • Build and deliver internal security awareness training, and onboard customers through the required security setup • Draft and coordinate customer-facing incident communications, including breach/incident notifications with legal and engineering

• Lead customer security reviews, RFPs, RFIs, and questionnaires, turning around accurate, complete responses fast enough to keep deals moving • Stand up and maintain a customer-facing trust portal (SafeBase / Vanta / Drata or equivalent), including a dedicated AI/ML section • Own SOC 2 Type II program management, driving audits across portfolio companies (including Sparkrock's Type II conversion and CXT scoping), coordinating evidence with the Senior Group Security Engineer, and managing auditor relationships • Author and maintain security policies and documentation, including DPAs, sub-processor lists, and incident-communication templates • Own AI compliance and trust, including AI questionnaire responses, AI sub-processor management, framework tracking (EU AI Act, ISO 42001, NIST AI RMF), AI use disclosure, AI acceptable-use policy, and AI incident-comms playbooks • Run third-party vendor security reviews and renewals • Build and deliver internal security awareness training, and onboard customers through the required security setup • Draft and coordinate customer-facing incident communications, including breach/incident notifications with legal and engineering

• Lead customer security reviews, RFPs, RFIs, and questionnaires, turning around accurate, complete responses fast enough to keep deals moving • Stand up and maintain a customer-facing trust portal (SafeBase / Vanta / Drata or equivalent), including a dedicated AI/ML section • Own SOC 2 Type II program management, driving audits across portfolio companies (including Sparkrock's Type II conversion and CXT scoping), coordinating evidence with the Senior Group Security Engineer, and managing auditor relationships • Author and maintain security policies and documentation, including DPAs, sub-processor lists, and incident-communication templates • Own AI compliance and trust, including AI questionnaire responses, AI sub-processor management, framework tracking (EU AI Act, ISO 42001, NIST AI RMF), AI use disclosure, AI acceptable-use policy, and AI incident-comms playbooks • Run third-party vendor security reviews and renewals • Build and deliver internal security awareness training, and onboard customers through the required security setup • Draft and coordinate customer-facing incident communications, including breach/incident notifications with legal and engineering

• Own the full marketing funnel — from awareness through retention — for K–12 education-focused products and services • Lead go-to-market planning for new product launches, including messaging, positioning, and channel strategy • Develop audience-specific messaging frameworks that reflect the realities facing district leadership teams (Finance, Business Operations, Superintendents) • Manage and optimize digital marketing channels, including email, paid media, SEO/SEM, LinkedIn, and webinars • Collaborate with Sales to develop enablement materials tailored to K-12 finance/operations buyers • Create compelling content, including case studies, thought leadership, and impact stories • Track, analyze, and report on campaign performance, adjusting strategy based on data and market feedback

• Own the end-to-end technical architecture of Sparkrock's SIS platform, spanning legacy VB6/COM/T-SQL systems and modern C# layers • Direct AI coding agents (Claude Code) to implement architectural decisions — you design, agents build • Define and enforce architectural guardrails: domain boundaries, coding conventions, and integration patterns for AI agents to follow • Review AI-generated code for architectural correctness and behavioral equivalence with legacy logic • Participate in requirements and specification reviews, providing architectural sign-off before work begins • Drive continuous improvement of agent workflows, prompts, and guardrails • Lead technical Deep Dives and RCAs; enforce quality on incoming epics; resolve production outages

• Own the end-to-end technical architecture of Sparkrock's SIS platform, spanning legacy VB6/COM/T-SQL systems and modern C# layers • Direct AI coding agents (Claude Code) to implement architectural decisions — you design, agents build • Define and enforce architectural guardrails: domain boundaries, coding conventions, and integration patterns for AI agents to follow • Review AI-generated code for architectural correctness and behavioral equivalence with legacy logic • Participate in requirements and specification reviews, providing architectural sign-off before work begins • Drive continuous improvement of agent workflows, prompts, and guardrails • Lead technical Deep Dives and RCAs; enforce quality on incoming epics; resolve production outages

• Own the end-to-end technical architecture of Sparkrock's SIS platform, spanning legacy VB6/COM/T-SQL systems and modern C# layers • Direct AI coding agents (Claude Code) to implement architectural decisions — you design, agents build • Define and enforce architectural guardrails: domain boundaries, coding conventions, and integration patterns for AI agents to follow • Review AI-generated code for architectural correctness and behavioral equivalence with legacy logic • Participate in requirements and specification reviews, providing architectural sign-off before work begins • Drive continuous improvement of agent workflows, prompts, and guardrails • Lead technical Deep Dives and RCAs; enforce quality on incoming epics; resolve production outages

• Own the end-to-end technical architecture of Sparkrock's SIS platform, spanning legacy VB6/COM/T-SQL systems and modern C# layers • Direct AI coding agents (Claude Code) to implement architectural decisions — you design, agents build • Define and enforce architectural guardrails: domain boundaries, coding conventions, and integration patterns for AI agents to follow • Review AI-generated code for architectural correctness and behavioral equivalence with legacy logic • Participate in requirements and specification reviews, providing architectural sign-off before work begins • Drive continuous improvement of agent workflows, prompts, and guardrails • Lead technical Deep Dives and RCAs; enforce quality on incoming epics; resolve production outages

• Design, execute, and measure AI-Native software development and quality engineering experiments. • Identify engineering bottlenecks where AI-Native workflows can improve productivity, quality, speed, developer experience, or release confidence. • Evaluate emerging AI engineering tools, coding agents, AI-enabled development environments, test generation tools, code review assistants, documentation tools, and developer productivity platforms. • Develop and institutionalize AI-Native development, testing, review, documentation, refactoring, debugging, and delivery practices. • Define and maintain engineering quality bars, operating standards, usage guardrails, workflow templates, and best practices for AI-assisted software development. • Create AI-Native quality engineering practices that improve test automation, regression prevention, validation, code review, quality gates, and production readiness. • Establish balanced metrics and measurement frameworks for engineering productivity, quality, cycle time, developer experience, adoption, and business impact. • Analyze experiment results and recommend whether practices should be adopted, modified, scaled, or retired. • Create playbooks, frameworks, operating models, and enablement materials that turn successful experiments into repeatable practices across the organization. • Coach engineers and engineering leaders to maximize effectiveness through AI-assisted development, agentic workflows, quality engineering, and human-AI collaboration. • Drive organization-wide adoption of proven AI-Native engineering practices through coaching, enablement, influence, measurement, and continuous feedback loops. • Define safe and responsible practices for AI-generated code, AI-assisted testing, tool usage, data exposure, IP protection, security, maintainability, and human review. • Partner with engineering, product, QA, security, DevOps, platform, and executive leadership to align AI-Native transformation efforts with business priorities. • Continuously improve software development, QA, automation, CI/CD, DevOps, cloud engineering, observability, security, and delivery processes through AI-Native approaches. • Develop strategic recommendations for the future evolution of software engineering at Sparkrock.