Senior Manager, Infosec, IT & Compliance

New

CanadaFull-TimeManager

Salary165,000 - 180,000 CAD per year

Apply NowOpens the employer's application page

Job Details

6+ years of experience in information security, IT operations, privacy, and compliance roles.
2+ years of experience in healthcare SaaS or another regulated industry.
Expertise in healthcare compliance frameworks (HIPAA/HITECH, PHIPA) and PHI protection.
Understanding of GDPR/UK GDPR and cross-border data transfers.
Experience negotiating and managing vendor agreements including BAAs and DPAs.
Experience implementing security frameworks such as SOC 2, ISO 27001, or equivalent.
Hands-on experience managing IT operations in remote-first organizations (IAM, device provisioning).
Technical understanding of SaaS architecture, APIs, AWS, and identity platforms (Google Workspace, Okta, Microsoft 365).
Experience scaling security, IT, and compliance functions in high-growth companies.
Strong communication skills for translating technical and regulatory concepts to executive stakeholders.

Lead and evolve information security, IT operations, and compliance programs to support business growth.
Manage compliance initiatives including HIPAA/HITECH, GDPR/UK GDPR, PIPEDA, Quebec Law 25, and PHIPA.
Own vendor risk management processes and negotiate Business Associate Agreements and Data Processing Agreements.
Partner with Engineering and Product teams to embed privacy-by-design and reduce compliance risks.
Drive security maturity initiatives including SOC 2 Type II and ISO 27001 readiness.
Oversee IT operations including onboarding, device management, and identity and access management.
Develop and maintain IAM strategies, including least-privilege access and role-based access controls.
Lead and mentor IT operations resources while partnering with internal and external stakeholders.

View Full Description & ApplyYou'll be redirected to the employer's site