RemoteLeaf Logo
Log in Sign up

Governance, Risk & Compliance (GRC) Manager

2 hours, 46 minutes ago
Canada
Full-time
Senior
Compliance Manager
Cybersecurity
HIPAA
Apply Now
Fullscript

Fullscript

Fullscript provides a platform that enables healthcare practitioners to create personalized supplement plans and recommend professional-grade supplements to their patients, enhancing patient care and treatment adherence through convenient ordering and ...

Health Care Providers & Services
251-1K
Founded 2011
$267M raised
View All Jobs 12

Description

  • Own and evolve Fullscript’s Governance, Risk & Compliance program.
  • Maintain compliance across SOC 2 Type II, PCI DSS, and HITRUST.
  • Develop and maintain security policies, standards, procedures, and control documentation.
  • Lead external audits, including planning, evidence collection, auditor coordination, remediation, and certification.
  • Manage internal control assessments and year-round audit-readiness activities.
  • Maintain risk registers, facilitate risk assessments, and drive remediation through completion.
  • Partner with Security, Engineering, Infrastructure, Privacy, Legal, Product, and IT to operationalize controls.
  • Support customer security reviews, due diligence requests, and compliance questionnaires.
  • Lead, coach, and develop a team of two GRC professionals.
  • Create compliance reporting and dashboards for organizational leadership.

Requirements

  • 7+ years of experience in GRC, information security, IT audit, or security compliance.
  • Previous people-management experience leading small, high-performing teams.
  • Hands-on experience owning enterprise compliance programs in SaaS or healthcare technology organizations.
  • Demonstrated experience leading SOC 2 Type II, PCI DSS, and HITRUST audits.
  • Familiarity with HIPAA requirements.
  • Strong understanding of NIST CSF, CIS Controls, ISO 27001, and HITRUST frameworks.
  • Experience managing control evidence, remediation programs, and continuous compliance activities.
  • Strong project management, organizational, written, and verbal communication skills.
  • Experience partnering with Privacy and Legal teams on regulatory compliance initiatives.
  • Preferred: healthcare or health technology experience, GRC platform experience with Vanta, Drata, OneTrust, or similar, relevant certifications such as CISSP or CISA, and customer security review experience.

Benefits

  • CAD $140,000–$165,000 base salary range.
  • Generous paid time off and competitive pay.
  • RRSP match program.
  • Flexible benefits package and workplace wellness program.
  • Training budget and company-wide learning initiatives.
  • Discount on Fullscript products.
  • Flexible work location: in-office, remote, or hybrid.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

KPA

Legal & Compliance Specialist – Auto Retail

KPA 251-1K Professional Services

KPA is seeking an Automotive Retail Legal & Compliance Specialist to strengthen federal and 50-state Advertising, Sales, and Finance & Insurance compliance through regulatory analysis, knowledge management, consultant enablement, and AI-enabled solutions.

United States Full-time Senior Compliance Manager Legal Counsel
$95k-$115k
2 hours, 1 minute ago
Crypto.com

Senior Compliance Analyst, Canada

Crypto.com 1K-5K Capital Markets

Crypto.com is seeking a Compliance Senior Analyst to strengthen its Canadian compliance program within a fast-moving digital asset and securities business by translating regulatory requirements into effective policies, controls, training, and operations.

Canada Full-time Senior Compliance Manager
2 hours, 31 minutes ago
Binance

Compliance Analyst - KYB

Binance 5K-10K Capital Markets

Binance is seeking a Corporate Compliance specialist to support onboarding, AML/CFT reviews, risk assessments, and regulatory compliance across its global blockchain and digital-asset business.

Hong Kong Full-time Mid Level Compliance Manager
Blockchain
2 hours, 31 minutes ago
Binance

Compliance Specialist

Binance 5K-10K Capital Markets

Binance is seeking an AML and financial crime compliance professional to investigate suspicious activity, manage regulatory reporting, and support UAE regulatory engagements across its global digital-asset ecosystem.

United Arab Emirates Full-time Senior Compliance Manager
Blockchain
2 days, 3 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers