The ONE that simplifies healthcare.
Senior Manager, Infosec, IT & Compliance
Location
Canada
Posted
1 day ago
Salary
$165K - $180K / year
Seniority
Senior
Job Description
Senior Manager, Infosec, IT & Compliance
Practice EHR
• Manage multi-jurisdictional compliance execution - Support implementation of HIPAA/HITECH, GDPR/UK GDPR, PIPEDA, Quebec Law 25, PHIPA, and emerging privacy laws and coordinate with legal counsel on complex regulatory matters. • Drive vendor risk management and BAA/DPA lifecycle - Negotiate and finalize Business Associate Agreements and Data Processing Agreements with subprocessors, ensuring breach notification timelines meet calendar-day standards, data deletion commitments are defined, and subprocessor transparency obligations are satisfied. • Mature security posture and operational resilience - Partner with Engineering to implement security controls that support SOC 2 Type II and ISO 27001 readiness, lead incident response planning and breach notification workflows, and establish monitoring/alerting. • Embed privacy-by-design across product and engineering - Collaborate with Product and Engineering leadership to assess PHI exposure in new features, define data minimization strategies, and guide architecture decisions that reduce compliance risk. • Lead IT operations and service delivery - Own user onboarding / offboarding workflows, device provisioning and management, and IT service delivery for a remote-first team, partnering with HR on seamless employee lifecycle management. • Drive Identity & Access Management (IAM) strategy - Own identity provider configuration and access control policies, implementing least-privilege access principles, periodic access reviews, and role-based access control (RBAC) frameworks. • Manage endpoint security and device management - Define and enforce endpoint security standards (MDM, disk encryption, antivirus, patching). Establish laptop procurement standards and remote device management policies. Coordinate with Engineering on developer tooling and access requirements. • Own SaaS vendor rationalization and procurement hygiene - Conduct regular vendor intelligence audits to identify tool overlaps, license waste and procurement gaps. Partner with Finance on SaaS spend optimization. • Strengthen the InfoSec, IT & Compliance function - Develop and refine processes, tooling, and documentation to support organizational growth. Manage and mentor the IT Operations team. Partner with third-party compliance advisors to accelerate maturity. • Act as the bridge between Legal, Engineering, IT, and the business — Translate complex legal language into actionable engineering requirements. Partner with Customer Success on practitioner-facing compliance communications. Coordinate cross-functional responses to regulatory inquiries, audits, and customer due diligence requests.
Job Requirements
- 6+ years of relevant experience in information security, IT operations, privacy, and compliance roles, with at least 2+ years in healthcare SaaS or regulated industry
- Deep expertise in HIPAA/HITECH compliance, including Business Associate obligations, breach notification requirements, and Covered Entity vs. Business Associate determination frameworks
- Strong working knowledge of GDPR/UK GDPR and cross-border data transfer mechanisms
- Proven ability to negotiate and finalize vendor BAAs and DPAs, with a strong understanding of must-have vs. nice-to-have contractual terms
- Experience implementing security frameworks (SOC 2, ISO 27001, or equivalent) and managing third-party audits or certifications
- Hands-on experience leading IT operations for remote-first organizations, including identity & access management, device provisioning, and SaaS vendor management
- Prior experience building or scaling InfoSec, IT, and compliance functions from scratch in high-growth SaaS companies
- Technical grounding in SaaS architecture, APIs, data flows, infrastructure (cloud environments like AWS), and identity providers (Google Workspace, Okta, Microsoft 365)
- Exceptional communication skills - you can translate legal jargon into plain language for practitioners, write concise vendor negotiation emails, and present compliance strategies to executive leadership with clarity and confidence
- Bias for action and pragmatic risk management - you know when to escalate to legal counsel and when to make judgment calls independently
- Comfortable operating in a fast-moving, high-growth environment where priorities shift and ambiguity is the norm.
Benefits
- Comprehensive health and dental benefits from day 1
- RRSP matching
- Generous paid parental leave
- Annual learning stipends
- Unlimited vacation
- $750 annual Health & Wellness Allowance
- $1,000 annual Learning & Development Allowance to support your growth
- $500 annual Home Office Allowance to set up a productive remote workspace
- Personalized support for family-building and fertility journeys
- Confidential, digital mental health support from licensed professionals
- Company-wide holiday closure in December
- Regular virtual company-wide events, lunches, and team socials to stay connected
Related Guides
Related Categories
Related Job Pages
More IT Support Jobs
Role Description Safebet sucht einen IT Support Analysten (m/w/x), der unser Team verstärkt. Wachse mit uns, bring neue Ideen ein und entwickle Produkte, die das Sporterlebnis für unsere Kunden noch spannender machen. Jeden Tag arbeitest du in einem hochgradig kollaborativen und agilen Umfeld mit funktionsübergreifenden Teammitgliedern zusammen, um Produkte weiterzuentwickeln und technische Lösungen zu schaffen, die uns voranbringen. - Stellen eines hohen Standards im Kundenservice (remote), in der Zufriedenheit und im Support. - Unterstützung des Corporate-IT-Teams bei der Bereitstellung hochwertiger IT-Support-Services für Endnutzer an allen Standorten der Safebet. - Analyse und Behebung technischer sowie operativer Probleme im Rahmen des Incident-Managements und der Request-Fulfillment-Prozesse. - Mitwirkung an Infrastrukturprojekten zur kontinuierlichen Verbesserung von Tools und Services für unsere Kunden. - Verantwortung für gemeldete Störungen und regelmäßige Kommunikation von Status und Fortschritt. - Analyse, Reparatur und Behebung von Problemen bei Hardware, Betriebssystemen und Software (Windows, macOS, mobile Geräte) sowie bei Systemausfällen und Datenwiederherstellung. - Verwaltung des internen Beschaffungsprozesses im IT-Support. - Verwaltung von Benutzerkonten, Gruppen, Passwörtern und Mailboxen in Active Directory, Exchange Servern (Office 365) sowie weiteren Systemen. - Pflege von Betriebsdokumentationen, einschließlich Knowledge-Base-Artikeln und Standard Operating Procedures. - Beitrag zur Weiterentwicklung und Optimierung von IT-Service-Management-Standards und -Prozessen. Qualifications - Mindestens 3 Jahre Erfahrung im IT-Support-Umfeld. - Fundierte Kenntnisse in IT-Service-Management-Standards und -Prozessen (ITIL). - Erfahrung mit Active Directory, E-Mail-Technologien (Office 365, Exchange Server) und Microsoft-Office-Anwendungen. - Kenntnisse in der Sicherheit von PC-Arbeitsplätzen sowie in Festplattenverschlüsselungssystemen. - Erfahrung mit ITSM-Anwendungen wie Jira Service Desk. - Verständnis von IP-Adressierung, Netzwerken und Telefonie. - Grundkenntnisse in WLAN-Technologie, Netzwerksystemen, Virtualisierung und virtuellen Infrastrukturen (VMware & Hyper-V). - Deutsch mind. B2 Niveau, sehr gute Englischkenntnisse in Wort und Schrift. Requirements - Agiles Mindset: Du lernst, passt dich an und verbesserst kontinuierlich unsere Arbeitsweise. - Teamplayer: Du lernst voneinander und entwickelst gemeinsam großartige Ideen. - Innovativ: Du bringst neue Ideen ein und arbeitest gerne mit neuesten Technologien. Benefits - Start-Up Qualität: Eine stabile Grundlage, auf der du wachsen kannst. - Persönliche und berufliche Weiterentwicklung: Vielfältige Möglichkeiten zur Weiterentwicklung. - Events: Spaß zusammen bei Charity-Aktionen oder Team-Events. - Unterstützendes Umfeld: Zusammenarbeit und Teamwork, während die Individualität geschätzt wird.
• Responsible for driving execution discipline, coordinating cross-functional activities, managing dependencies, maintaining governance processes, and ensuring leadership has clear visibility into program progress, risks, issues, and decisions • Serve as a trusted partner to business and functional leaders while ensuring delivery against critical transformation milestones • Lead recurring project status meetings and document outcomes • Provide concise executive-level reporting on progress, risks, decisions, and resource needs • Develop and distribute project communications to stakeholders • Ensure transparency and alignment through consistent communication and reporting practices
IT Technician
Strategic Growth PartnersSGP is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. We are committed to a collaborative, inclusive environment that encourages authenticity and fosters a sense of belonging. We are also committed to providing accommodations for persons with disabilities.
• To diagnose, maintain and repair IT systems. • Gather details from staff and systems, possess clear communication skills, provide clear documentation on steps taken, enact any defined operating procedure and/or approved best practices per scenario. • To navigate, guide and apply necessary base configuration changes in various system interfaces. • Tier 1-2 End-user support including help escalating to contracted other 3rd party providers. • Simple migration tasks between software and applications. • Create and maintain technical documentation for both IT and End User audiences. • Other basic and intermediate IT administration tasks mutually agreed upon. • Maintain approved on-going training, research, and troubleshoot concepts in Dev environment. • Work with Managers and HR to Onboard/Offboard personnel. • Partake in company meetings. • Provide guidance, training, and mentorship to junior IT team members. • Work with diverse people, companies, time zones, platforms, and varying levels of demands. • Work on Special Projects for IT Division.
Permit Technician – Single Trade Submittals
Tew & TaylorPremier provider of plan review and private construction inspections.
• Prepare, submit, and track a high volume of permit applications with local and state agencies each week. • Manage submittals through various Florida building department portals. • Review permit requirements to ensure compliance with regulations and company policies. • Respond to comments and corrections, and resolve deficiencies to keep applications moving toward approval. • Maintain detailed records of permits, approvals, and related documentation. • Communicate with municipal departments and regulatory agencies to resolve permitting issues. • Assist project managers and clients in navigating the permitting process. • Coordinate documentation, plans, and supporting materials to ensure complete, first-pass submittals.
