RemoteLeaf Logo
Log in Sign up

Governance, Risk & Compliance (GRC) Manager

1 month, 2 weeks ago
Canada
Full-time
Senior
Compliance Manager
Cybersecurity
HIPAA
Apply Now
Fullscript

Fullscript

Fullscript provides a platform that enables healthcare practitioners to create personalized supplement plans and recommend professional-grade supplements to their patients, enhancing patient care and treatment adherence through convenient ordering and ...

Health Care Providers & Services
251-1K
Founded 2011
$267M raised
View All Jobs 6

Description

  • Own and evolve Fullscript’s Governance, Risk & Compliance program.
  • Maintain compliance across SOC 2 Type II, PCI DSS, and HITRUST.
  • Develop and maintain security policies, standards, procedures, and control documentation.
  • Lead external audits, including planning, evidence collection, auditor coordination, remediation, and certification.
  • Manage internal control assessments and year-round audit-readiness activities.
  • Maintain risk registers, facilitate risk assessments, and drive remediation through completion.
  • Partner with Security, Engineering, Infrastructure, Privacy, Legal, Product, and IT to operationalize controls.
  • Support customer security reviews, due diligence requests, and compliance questionnaires.
  • Lead, coach, and develop a team of two GRC professionals.
  • Create compliance reporting and dashboards for organizational leadership.

Requirements

  • 7+ years of experience in GRC, information security, IT audit, or security compliance.
  • Previous people-management experience leading small, high-performing teams.
  • Hands-on experience owning enterprise compliance programs in SaaS or healthcare technology organizations.
  • Demonstrated experience leading SOC 2 Type II, PCI DSS, and HITRUST audits.
  • Familiarity with HIPAA requirements.
  • Strong understanding of NIST CSF, CIS Controls, ISO 27001, and HITRUST frameworks.
  • Experience managing control evidence, remediation programs, and continuous compliance activities.
  • Strong project management, organizational, written, and verbal communication skills.
  • Experience partnering with Privacy and Legal teams on regulatory compliance initiatives.
  • Preferred: healthcare or health technology experience, GRC platform experience with Vanta, Drata, OneTrust, or similar, relevant certifications such as CISSP or CISA, and customer security review experience.

Benefits

  • CAD $140,000–$165,000 base salary range.
  • Generous paid time off and competitive pay.
  • RRSP match program.
  • Flexible benefits package and workplace wellness program.
  • Training budget and company-wide learning initiatives.
  • Discount on Fullscript products.
  • Flexible work location: in-office, remote, or hybrid.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Turing

Compliance Analyst

Turing 251-1K Internet Software & Services

Turing is hiring a remote Compliance Analyst to protect its global technical-talent network by managing KYC, identity verification, sanctions screening, and fraud-risk controls.

Brazil Lead Compliance Manager
4 hours, 27 minutes ago
Apryse

Director, License Assurance

Apryse 251-1K Internet Software & Services

Apryse is seeking a Director, License Assurance to lead a global, data-driven software license audit and compliance program across its document technology products and customer base.

United States Full-time Executive Compliance Manager
$160k-$180k
CRM macOS Salesforce
5 hours, 13 minutes ago
Pathward

BSA AML Analyst II

Pathward 251-1K Diversified Financial Services

Pathward is hiring a BSA/AML Risk Analyst II to support its second-line compliance program by overseeing AML controls, advising business partners, and reducing financial-crime compliance risk.

United States Full-time Junior Compliance Manager
$50k-$84k
E-commerce
2 days, 4 hours ago
Cadence

Compliance Analyst, Policy & Corporate Compliance

Cadence 51-250 Health Care Providers & Services

Cadence, a clinical AI company supporting chronic disease care, is hiring a Compliance Analyst to govern policies and SOPs, conduct compliance reviews, and track risk remediation across care delivery operations.

Anywhere Full-time Mid Level Compliance Manager
$85k-$110k
Git
3 days, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers