Security & Compliance Partner

PurposeMed is a Canadian-founded healthtech company established in 2019, providing specialized care to underserved communities across Canada and the US through various units including Freddie, Frida, Foria, and Affirming Care Pharmacy. The company is recognized for its rapid growth and commitment to making healthcare accessible.

Location: Remote (Canada)

Salary: $97,000 – $115,000 CAD per year

Responsibilities

• Owning security monitoring and incident detection across cloud infrastructure and SaaS tools, including AI-powered tools.
• Leading response to security incidents from containment to lessons learned.
• Proactively identifying security gaps with Product, Design, and Engineering teams.
• Supporting vulnerability assessments and compliance initiatives such as penetration testing.
• Ensuring data collection, consent practices, and ad-tech responsibilities meet standards and regulations.
• Implementing and improving security controls like MFA, access management, logging, and endpoint protection.
• Supporting audit and compliance activities related to HIPAA, PIPEDA, and vendor security reviews.
• Developing security policies, playbooks, and documentation.
• Leading security awareness efforts focusing on phishing, account compromise, and attack vectors.

Requirements

• 3–5 years of experience in IT, cybersecurity, or technical support with exposure to security or incident response.
• Foundational understanding of security concepts (access controls, MFA, encryption) and incident response principles.
• Familiarity with security monitoring tools such as SIEM, EDR, or log management platforms.
• Experience working in cloud environments and supporting remote workforces.
• Ability to act as a first responder and escalate appropriately.
• Strong attention to detail, urgency, and willingness to learn.
• Clear communication and documentation skills.

Benefits

• $97,000 – $115,000 CAD annual salary.
• Stock options through Equity Incentive Plan.
• Work flexibility and remote work options.
• 20 vacation days plus an annual winter break closure.
• Comprehensive medical, dental, and vision coverage, with premiums paid by the company.
• 8 health/sick days.
• Extended mental health coverage.
• $20,000 lifetime coverage for gender-affirming care (Canada).
• $500 professional development fund.
• People Potential program for growth and development.

Additional Information

• This role is remote within Canada.
• The company values diversity and encourages marginalized communities to apply.
• Most roles are virtual, with onsite presence required only at certain locations for specific roles.