Expert en stratégie numérique d’identité et sécurité chez Beneva, assureur et fournisseur de services financiers. Définit la feuille de route d’authentification, de validation d’identité et de gestion des accès.
About the role
- Security and Compliance Associate at Habitat Learn, an EdTech company focused on accessibility. Supporting compliance and security operations for multiple frameworks in a remote role based in Ontario.
Responsibilities
- Support ongoing compliance activities across SOC 2, ISO 27001, HIPAA, HECVAT, and TX-RAMP
- Collect, organize, and maintain audit evidence and security documentation
- Help draft and maintain security policies, procedures, and internal standards
- Complete security questionnaires and HECVAT submissions for institutional procurement
- Maintain a compliance tracker and support audit readiness activities
- Review findings from the Humber Digital Tech Hub cybersecurity assessment
- Track remediation tasks and help coordinate follow-up with engineering and leadership
- Support updates to the risk register and documentation of control gaps and resolutions
- Act as an internal coordinator for progress tracking and reporting
- Support user access controls, provisioning, and offboarding processes
- Assist with vendor security reviews and BAA tracking
- Help coordinate internal security awareness and training activities
- Support Apple device management processes (MDM, Apple Business Manager)
- Support responses to customer security reviews and procurement due diligence requests
- Assist in preparing compliance and security status updates for leadership
- Stay informed on relevant privacy and data protection regulations (FERPA, PIPEDA, etc.)
Requirements
- Recent graduate (within 1–2 years) of a diploma or degree in Cybersecurity, Protection & Security Investigation, IT Security, Network Security, or a related field
- Ontario institutions such as Humber Polytechnic, Seneca Polytechnic, George Brown College, or equivalent programs are strongly welcomed
- Coursework in cybersecurity frameworks, risk management, or privacy law is an asset
- Strong attention to detail and highly organized approach to documentation
- Clear written communication skills (policy writing and institutional responses are key parts of the role)
- Comfortable working independently in a fast-paced, evolving environment
- Curious about security and privacy, with an interest in understanding underlying systems (not just processes)
- Ability to manage multiple priorities and stay structured in a startup setting
- Exposure to frameworks such as SOC 2, ISO 27001, NIST, HIPAA, or similar is a nice to have
- Familiarity with Apple device management or enterprise IT environments
- Entry-level certifications (e.g., CompTIA Security+, ISC2 CC)
- Experience with tools such as Vanta, Drata, Notion, or Jira
- Prior co-op, internship, or volunteer experience in IT, security, or compliance
Benefits
- A meaningful first role with real ownership (not an internship-style support role)
- Direct mentorship from the VP of Engineering and exposure to company leadership
- Structured guidance through the Humber Digital Tech Hub cybersecurity assessment
- Hands-on experience across multiple enterprise compliance frameworks
- Exposure to real institutional procurement and security processes
- A mission-driven product supporting accessibility in education
- Remote Employment
- Health Benefits
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Head of Security leading Super.com's AI - first security program and enterprise risk strategy. Building security teams, protecting financial technology products, and partnering with executives and the board.
Security Consultant II integrating Akamai security products for government agencies. Advising customers, tuning web security solutions, and improving delivery methodologies.
Information Security Design Specialist securing Dentons Canada’s legal technology environment. Designing cloud, identity, SaaS, API, and AI security architectures across the Canada region.
Senior SOC Level 2 specialist protecting OLG’s lottery and gaming operations from cyber threats. Investigating incidents, containing attacks, and improving detection capabilities.
Workshop Director delivering cybersecurity and IT advisory workshops for Info - Tech Research Group. Leading client assessments, recommendations, research contributions, and AI capability development.
Senior Security Consultant guiding Akamai customers through security integrations and support. Delivering trusted technical consultancy across the company’s cloud, edge, and security products.
Information Security Manager preparing Cloudiax’s cloud SAP services for ISO 27001, NIS - 2, and IKS compliance. Managing audits, security documentation, and internal control processes remotely worldwide.
Staff software engineer directing GitLab's AI - assisted static analysis engine and SAST capabilities. Defining program - analysis architecture, trustworthy agent tooling, and security detection quality.
Product Security Specialist strengthening security for Safe Software’s FME data integration platform. Supporting SDLC security, AI governance, vulnerability disclosure, and customer security engagements remotely across Canada.