Security and Compliance Associate
- Role
- Security
- Experience
- Entry level
- Employment
- Part-time15–20h/week
- Company size
- Startup
Open to CA only. Set where you work from to check your eligibility.
No BS summary
Habitat Learn is seeking a Security and Compliance Associate to support and strengthen their security and compliance program across multiple frameworks (SOC 2, ISO 27001, HIPAA, HECVAT, Texas RAMP). This is a newly created part-time role, with potential for full-time, reporting to the VP of Engineering. The role is remote but requires candidates to be Ontario-based.
Optional skills
What you'll do
- Support ongoing compliance activities across SOC 2, ISO 27001, HIPAA, HECVAT, and TX-RAMP
- Collect, organize, and maintain audit evidence and security documentation
- Help draft and maintain security policies, procedures, and internal standards
- Complete security questionnaires and HECVAT submissions for institutional procurement
- Review findings from the Humber Digital Tech Hub cybersecurity assessment
What they require
- Recent graduate (within 1–2 years) of a diploma or degree in Cybersecurity, Protection & Security Investigation, IT Security, Network Security, or a related field
- Strong attention to detail and highly organized approach to documentation
- Clear written communication skills (policy writing and institutional responses are key parts of the role)
- Comfortable working independently in a fast-paced, evolving environment
- Curious about security and privacy, with an interest in understanding underlying systems (not just processes)
Benefits
- A meaningful first role with real ownership (not an internship-style support role)
- Direct mentorship from the VP of Engineering and exposure to company leadership
- Structured guidance through the Humber Digital Tech Hub cybersecurity assessment
- Hands-on experience across multiple enterprise compliance frameworks
- Exposure to real institutional procurement and security processes
Habitat Learn is an education technology company focused on making learning accessible for every student. Our products include Messenger Pigeon, an AI-powered platform for learning, note-taking, and live captioning, and Podium Solution, an on-device classroom accessibility platform designed with privacy and security at its core. Our technology is used by educational institutions including Harvard, UC Berkeley, Yale, the University of Toronto, and Humber Polytechnic to support more inclusive and accessible learning environments. We are a design-led company with privacy, security, and data sovereignty as core principles. Podium Solution processes audio entirely on-device by design. We also provide Apple hardware to our team to ensure consistency, security, and performance across our workflows. As we scale across North America, we are formalizing our security and compliance function to support institutional requirements and evolving public-sector standards.