Coordinate activities required to achieve and maintain ISO 27001 certification, including risk assessments, control documentation, evidence management, and audit preparation
Ensure compliance with relevant healthcare privacy and data protection regulations
Maintain and update security policies, standards, and procedures
Assist in managing third-party security due-diligence reviews
Lead or facilitate annual cyber security risk assessments, identifying vulnerabilities
Work collaboratively with IT, data, and operations teams
Support regular internal audits and readiness reviews
Coordinate regular penetration testing and vulnerability scans
Manage relationships with external cyber security partners
Monitor security alerts, threat intelligence feeds, and reports relevant to healthcare and pharmacy systems
Communicate security risks, incidents, and recommendations
Promote a culture of security awareness
Additional duties as assigned by the manager.

Requirements

Degree in Information Security, Computer Science, a related discipline, or equivalent experience
Experience implementing and managing data Loss Prevention (DLP) for SharePoint\OneDrive
3+ years of Canadian work experience in information security, risk management, or compliance ideally within healthcare, pharmacy, or patient support programs
Experience facilitating penetration testing, audits, and vulnerability assessments
Strong vendor-management and communication skills
Relevant industry certifications
Experience working in environments that handle PHI/PII, patient engagement platforms, or healthcare CRM systems
Understanding of healthcare privacy frameworks
Familiarity with cloud security principles (AWS, Azure, or GCP)
High integrity, discretion, and accountability
Strong analytical and problem-solving abilities
Collaborative and approachable, with the ability to engage both technical and clinical teams
Detail-oriented with a focus on continuous improvement
Passionate about advancing patient safety and trust through secure, compliant technology.

Benefits

Competitive Salary and generous vacation entitlement
Wellness Program (5 paid days off for your well-being!)
Paid Sick Days
Competitive Benefits Package including Dental & Extended Health Benefits, AD&D, LTD & Employee/Dependent Life Insurance
Employee & Family Assistance Program
RRSP Matching Program

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard skills

ISO 27001 certificationrisk assessmentscontrol documentationdata Loss Prevention (DLP)penetration testingvulnerability assessmentssecurity policiesaudit preparationcompliancecloud security principles

Soft skills

vendor-managementcommunicationanalytical abilitiesproblem-solvingcollaborativeapproachabledetail-orientedintegritydiscretionaccountability

Certifications

relevant industry certifications