GRC Specialist Needed for EdTech Platform
Publicada el 2026-07-19
Descripción de la oferta
We run a growing language-learning EdTech platform (learn.frenchwithkunal.ca) built on a custom stack: HTML/JS/CSS on the frontend, a Python backend, deployed on Heroku, using Cloudflare for DNS/WAF, and a GoDaddy registered domain. We are currently closing B2B sales contracts with public Canadian universities and need a Governance, Risk, and Compliance (GRC) or InfoSec specialist to help us clear their vendor security registration pipeline and fill out higher education compliance paperwork. ***IMPORTANT: You will NOT be given access to our source code repository. You will audit our architecture dynamically via interview questions.*** Scope of Work Includes: 1. HECVAT 4 Completion: Review our Python/Heroku architecture and pre-fill the Higher Education Community Vendor Assessment Toolkit (HECVAT 4) master Excel sheet so it is university-ready. 2. Policy Engineering: Update our baseline Privacy Policy, Terms of Service, and Data Residency documentation to ensure they satisfy Canadian university procurement teams (specifically aligning with PIPEDA and provincial regulations like Ontario's FIPPA). 3. Data Residency Strategy: Advise on our data routing. We need to clearly explain to universities how our Cloudflare proxy handles encryption in transit (TLS 1.3) and evaluate our Heroku database region setup against Canadian data residency demands. Required Experience: - Direct experience filling out HECVAT documentation for Higher Ed institutions. - Deep understanding of web application security configurations involving Heroku dynos and Cloudflare proxying (SSL/TLS Full Strict mode, WAF settings). - Familiarity with Canadian public sector data privacy rules (FIPPA/FOIP) is a massive asset. Budget: Fixed Price Project Timeline: 7–10 days execution time. Please reply with your specific experience completing HECVAT sheets and your estimated turnaround time.
Skills
- Cloudflare
- Python
- Heroku
- HTML
- JavaScript
- Ventas B2B
- Compliance
- Presupuestos
- Microsoft Excel
- Auditoría
- Cierre de Ventas
- CSS
Fuente original: freelancer