Security and Compliance Associate

Employment Type - Part-time (15–20 hrs/week); potential to grow to full-time Reports to- VP of Engineering Location- Remote — must be Ontario-based; head office is in Toronto Target Start- As soon as possible About Habitat Learn Habitat Learn is an education technology company focused on making learning accessible for every student. Our products include Messenger Pigeon, an AI-powered platform for learning, note-taking, and live captioning, and Podium Solution, an on-device classroom accessibility platform designed with privacy and security at its core. Our technology is used by educational institutions including Harvard, UC Berkeley, Yale, the University of Toronto, and Humber Polytechnic to support more inclusive and accessible learning environments. We are a design-led company with privacy, security, and data sovereignty as core principles. Podium Solution processes audio entirely on-device by design. We also provide Apple hardware to our team to ensure consistency, security, and performance across our workflows. As we scale across North America, we are formalizing our security and compliance function to support institutional requirements and evolving public-sector standards. About the Role This is a newly created role at Habitat Learn for someone early in their career who is eager to take ownership, learn quickly, and grow within a fast-moving EdTech company. As our first dedicated Security & Compliance Associate, you will support and help strengthen our security and compliance program across multiple frameworks, including SOC 2, ISO 27001, HIPAA, HECVAT, and Texas RAMP. You will not be working alone. We are currently engaged with the Humber Polytechnic Digital Tech Hub for a cybersecurity assessment, followed by ongoing advisory support. This provides a structured foundation, external expertise, and a clear remediation roadmap. Your role will be to help operationalize and execute this roadmap internally. You will work closely with the VP of Engineering and engineering leadership to ensure security and compliance requirements are embedded into day-to-day product and infrastructure operations. What You’ll Do Compliance & Documentation Support ongoing compliance activities across SOC 2, ISO 27001, HIPAA, HECVAT, and TX-RAMP Collect, organize, and maintain audit evidence and security documentation Help draft and maintain security policies, procedures, and internal standards Complete security questionnaires and HECVAT submissions for institutional procurement Maintain a compliance tracker and support audit readiness activities Cybersecurity Assessment Follow-Through Review findings from the Humber Digital Tech Hub cybersecurity assessment Track remediation tasks and help coordinate follow-up with engineering and leadership Support updates to the risk register and documentation of control gaps and resolutions Act as an internal coordinator for progress tracking and reporting Security Operations Support Support user…