Compliance & Risk Program Manager

WHO WE ARE: MagicSchool is the premier generative AI platform for teachers. We're just over 2 years old, and more than 6 million teachers from all over the world have joined our platform. Join a top team at a fast growing company that is working towards real social impact. Make an account and try us out at our website and connect with our passionate community on our Wall of Love.

We’re seeking a Risk & Compliance Manager to design, lead, and scale our compliance program as we expand globally. The ideal candidate has deep experience in SOC 2, FERPA, and COPPA frameworks and thrives working cross-functionally in an Agile, fast-paced environment with engineering and product teams. This person will champion data privacy, regulatory compliance, and risk management — ensuring MagicSchool remains a trusted, secure, and responsible partner for educators everywhere.

Key Responsibilities

• Own Compliance Programs: Lead MagicSchool’s SOC 2 readiness and audits, ensuring controls are properly designed, implemented, and tested.

• Education-Specific Compliance: Maintain compliance with FERPA and COPPA, advising product and technical teams on student data privacy requirements.

• Agile Collaboration: Partner within Agile teams to embed compliance and privacy-by-design principles into product development and sprint cycles

• Technical Partnership: Work closely with engineering and infrastructure teams to establish security and compliance best practices across cloud environments (AWS, GCP, or Azure).

• International Expansion: Research, design, and oversee compliance with global data protection laws (e.g., GDPR, PIPEDA) as MagicSchool scales internationally.

• Risk Management: Build and maintain risk frameworks to identify, assess, and mitigate organizational and technical risks.

• Policy & Process Development: Create and manage policies on data handling, access controls, vendor risk, and incident response.

• Cross-Functional Enablement: Educate and guide non-technical teams (sales, support, marketing) on compliance responsibilities and risk mitigation practices.

• Training & Awareness: Deliver compliance training programs to ensure company-wide understanding and adherence to privacy and security obligations.

• Monitoring & Reporting: Track compliance KPIs, prepare audit and risk reports, and present findings to leadership and key stakeholders.
  

• 5+ years of experience in risk, compliance, or information security roles (preferably in SaaS, edtech, or regulated industries).

• Proven success leading SOC 2 or equivalent audits (Type I/II).

• Strong working knowledge of FERPA, COPPA, and related data protection frameworks.

• Familiarity with Agile methodologies and experience integrating compliance processes into Agile workflows.

• Demonstrated ability to collaborate with technical teams, influencing architecture and design decisions through a compliance and risk lens.

• Experience managing or building compliance programs across cloud infrastructure (AWS, GCP, or Azure).

• Strong communication and stakeholder engagement skills — able to bridge technical and business perspectives.

• Relevant certifications such as CIPP/US, CIPM, CISA, or CISSP preferred.

Why Join Us?

• Work on cutting-edge AI technology that directly impacts educators and students.

• Join a mission-driven team passionate about making education more efficient and equitable.

• Flexibility of working from home, while fostering a unique culture built on relationships, trust, communication, and collaboration with our team - no matter where they live.

• Unlimited time off to empower our employees to manage their work-life balance. We work hard for our teachers and users, and encourage our employees to rest and take the time they need.

• Choice of employer-paid health insurance plans so that you can take care of yourself and your family. Dental and vision are also offered at very low premiums.

• Every employee is offered generous stock options, vested over 4 years.

• Plus a 401k match & monthly wellness stipend

Our Values:

• Educators are Magic:  Educators are the most important ingredient in the educational process - they are the magic, not the AI. Trust them, empower them, and put them at the center of leading change in service of students and families.

• Joy and Magic: Bring joy and magic into every learning experience - push the boundaries of what’s possible with AI.

• Community:  Foster community that supports one another during a time of rapid technological change. Listen to them and serve their needs.

• Innovation:  The education system is outdated and in need of innovation and change - AI is an opportunity to bring equity, access, and serve the individual needs of students better than we ever have before.

• Responsibility: Put responsibility and safety at the forefront of the technological change that AI is bringing to education.

• Diversity: Diversity of thought, perspectives, and backgrounds helps us serve the wide audience of educators and students around the world.

• Excellence:  Educators and students deserve the best - and we strive for the highest quality in everything we do.