Role Description The Temporary Marketing Compliance Analyst will support the organization's marketing compliance function by leading and coordinating the review of promotional and advertising materials to ensure conformance with all applicable federal regulations, industry standards, and internal company policies. This role serves as a link between the marketing, legal, and regulatory affairs teams, helping to ensure that all externally facing communications related to the company's medical device products are accurate, substantiated, and compliant with FDA requirements and other applicable regulations. - Review and evaluate marketing and promotional materials, including print advertisements, digital content, sales collateral, trade show materials, social media content, and product labeling, for compliance with FDA regulations and applicable industry standards. - Ensure all promotional claims are truthful, non-misleading, adequately substantiated, and consistent with cleared or approved product indications for use. - Monitor adherence to FDA requirements governing medical device advertising and promotion, including applicable provisions of 21 CFR Part 801 (labeling), 21 CFR Part 820 (quality system regulation), and FTC advertising standards. - Coordinate with marketing, regulatory, and clinical teams to resolve compliance questions and provide guidance on permissible promotional claims and messaging strategies. - Maintain accurate and organized compliance documentation, including records of material reviews, approval histories, and correspondence with internal stakeholders. - Support the development and maintenance of internal standard operating procedures related to marketing compliance review processes. - Lead cross-functional marketing asset meetings. Qualifications - Bachelor's degree in a relevant field such as regulatory affairs, life sciences, public health, communications, or a related discipline. - Minimum of 3 years of experience in marketing compliance, regulatory affairs, or a related function within the medical device, pharmaceutical, or life sciences industry. - Working knowledge of FDA regulations governing medical device advertising and promotional labeling, including 21 CFR Parts 801 and 820 and relevant FDA guidance documents. - Familiarity with FTC advertising standards and their application to health-related product claims. - Strong analytical and critical thinking skills with the ability to interpret regulatory requirements and apply them to marketing content. - Excellent written and verbal communication skills, with the ability to clearly articulate compliance issues and recommendations to non-regulatory stakeholders. - Strong organizational skills and attention to detail, with the ability to manage multiple concurrent reviews and meet deadlines. Requirements - For this role, we are only considering candidates who are legally authorized to work in the United States and who do not now or in the future require sponsorship for employment visa status. - Butterfly Network does not accept agency resumes. - Butterfly Network is an E-Verify Company. - Butterfly Network is an equal opportunity employer. Regardless of race, traits associated with race, color, ancestry, religion, gender, national origin, sexual orientation, age, citizenship, marital status, disability or Veteran status. All your information will be kept confidential according to EEO guidelines. - Butterfly requires security adherence responsibilities from all employees, including: adhering to all company security policies and procedures, utilizing provided company assets securely, and completing all required security awareness training programs. - Safeguarding company data and systems from unauthorized access, modification, or destruction, contributing to the overall security posture of the organization. - Immediately reporting any suspected or actual security incidents, including phishing attempts, malware infections, or unauthorized access, following the established incident response procedure. Benefits - This is a temporary part-time position (20 to 25 hours a week) engaged for a defined period and does not constitute an offer of or commitment to permanent employment. - This temporary position should be East Coast based - preference for NYC, CT or MA. - This is an hourly position 20 to 25 hours a week. Our estimated rate is $50 an hour. Company Description At Butterfly Network, we’re leading a digital revolution in medical imaging, transforming an industry that has long relied on bulky, analog systems. With our proprietary Ultrasound-on-Chip™ technology, we’re democratizing healthcare by shifting ultrasound from the expensive, stationary systems of the past to the connected, mobile, and software-enabled platforms of today. In 2018, we launched the world’s first handheld, whole-body ultrasound, Butterfly iQ – followed by iQ+ in 2020 and iQ3 in 2024, each more powerful than the last. Our innovation doesn’t stop at hardware. Butterfly combines our advanced device with intelligent software, AI, services, and education to drive adoption of affordable, accessible imaging. Our technology is proving to help clinicians, clinics, and hospitals enhance care, cut costs, and expand imaging access. We’ve been recognized by Prix Galien USA, Fierce 50, TIME’s Best Inventions, Fast Company’s World Changing Ideas, among other awards. We’re a team of bold thinkers, problem-solvers, and innovators ready to shape the future of medical imaging. Let’s build something extraordinary together!

Role Description This is a newly created role at Habitat Learn for someone early in their career who is eager to take ownership, learn quickly, and grow within a fast-moving EdTech company. As our first dedicated Security & Compliance Associate, you will support and help strengthen our security and compliance program across multiple frameworks, including SOC 2, ISO 27001, HIPAA, HECVAT, and Texas RAMP. You will not be working alone. We are currently engaged with the Humber Polytechnic Digital Tech Hub for a cybersecurity assessment, followed by ongoing advisory support. This provides a structured foundation, external expertise, and a clear remediation roadmap. Your role will be to help operationalize and execute this roadmap internally. You will work closely with the VP of Engineering and engineering leadership to ensure security and compliance requirements are embedded into day-to-day product and infrastructure operations. What You’ll Do - Compliance & Documentation - Support ongoing compliance activities across SOC 2, ISO 27001, HIPAA, HECVAT, and TX-RAMP - Collect, organize, and maintain audit evidence and security documentation - Help draft and maintain security policies, procedures, and internal standards - Complete security questionnaires and HECVAT submissions for institutional procurement - Maintain a compliance tracker and support audit readiness activities - Cybersecurity Assessment Follow-Through - Review findings from the Humber Digital Tech Hub cybersecurity assessment - Track remediation tasks and help coordinate follow-up with engineering and leadership - Support updates to the risk register and documentation of control gaps and resolutions - Act as an internal coordinator for progress tracking and reporting - Security Operations Support - Support user access controls, provisioning, and offboarding processes - Assist with vendor security reviews and BAA tracking - Help coordinate internal security awareness and training activities - Support Apple device management processes (MDM, Apple Business Manager) - Stakeholder Support - Support responses to customer security reviews and procurement due diligence requests - Assist in preparing compliance and security status updates for leadership - Stay informed on relevant privacy and data protection regulations (FERPA, PIPEDA, etc.) Qualifications - Recent graduate (within 1–2 years) of a diploma or degree in Cybersecurity, Protection & Security Investigation, IT Security, Network Security, or a related field - Ontario institutions such as Humber Polytechnic, Seneca Polytechnic, George Brown College, or equivalent programs are strongly welcomed - Coursework in cybersecurity frameworks, risk management, or privacy law is an asset Requirements - Strong attention to detail and highly organized approach to documentation - Clear written communication skills (policy writing and institutional responses are key parts of the role) - Comfortable working independently in a fast-paced, evolving environment - Curious about security and privacy, with an interest in understanding underlying systems (not just processes) - Ability to manage multiple priorities and stay structured in a startup setting Nice to Have - Exposure to frameworks such as SOC 2, ISO 27001, NIST, HIPAA, or similar - Familiarity with Apple device management or enterprise IT environments - Entry-level certifications (e.g., CompTIA Security+, ISC2 CC) - Experience with tools such as Vanta, Drata, Notion, or Jira - Prior co-op, internship, or volunteer experience in IT, security, or compliance Benefits - A meaningful first role with real ownership (not an internship-style support role) - Direct mentorship from the VP of Engineering and exposure to company leadership - Structured guidance through the Humber Digital Tech Hub cybersecurity assessment - Hands-on experience across multiple enterprise compliance frameworks - Exposure to real institutional procurement and security processes - A mission-driven product supporting accessibility in education - Remote Employment - Health Benefits

• Own and manage the organization's compliance program, including SOC 2 and ISO 27001 readiness, certification, and ongoing maintenance. • Develop and execute a compliance roadmap aligned with business objectives, regulatory requirements, and organizational risk appetite. • Lead internal and external audits by coordinating evidence collection, managing auditor relationships, and driving timely remediation of findings. • Monitor changes in regulatory and industry frameworks, assessing their impact on the organization's compliance program. • Own the enterprise risk management process, including risk identification, assessment, treatment planning, and ongoing monitoring. • Conduct periodic risk assessments and partner with stakeholders to identify control gaps and prioritize remediation activities. • Develop and present compliance metrics, risk dashboards, and executive reports for senior leadership. • Design, document, and improve internal controls aligned with SOC 2, ISO 27001, and other applicable frameworks. • Lead control testing, including evidence collection, effectiveness validation, remediation tracking, and continuous improvement. • Expand and mature the organization's common controls framework to support evolving compliance requirements. • Administer and optimize compliance automation platforms, improving workflow efficiency and reducing manual effort. • Perform User Access Reviews (UARs) and support continuous compliance monitoring through automation and reporting. • Partner with Engineering, Security, Product, Legal, HR, and Operations to integrate compliance into business processes and product development. • Develop training, playbooks, and self-service resources that empower teams to meet compliance requirements efficiently. • Manage multiple compliance initiatives simultaneously while ensuring projects remain on schedule and stakeholders stay informed.

• Lead and manage the organization's compliance program across multiple business functions. • Monitor federal, state, and local regulatory changes and implement necessary policy and procedural updates. • Ensure compliance with Fair Housing, affordable housing, privacy, AML/KYC, licensing, and other applicable regulations. • Oversee compliance for affordable housing programs including LIHTC, HUD, Section 8, HOME, and other federal, state, and local housing programs. • Conduct compliance audits, tenant file reviews, documentation reviews, and internal control assessments. • Prepare properties for agency inspections and coordinate responses to audit findings. • Develop and maintain compliance policies, procedures, internal controls, and record retention standards. • Design and deliver compliance training for corporate teams, property managers, and on-site staff. • Support acquisitions, financing, investor activities, and due diligence by reviewing documentation for regulatory compliance. • Prepare reports and compliance documentation for executive leadership, investors, government agencies, and external auditors. • Partner with Legal, Finance, Human Resources, Asset Management, Property Management, and Operations to promote a culture of compliance. • Serve as a trusted resource by providing guidance on compliance-related questions and helping resolve regulatory issues.