Lead and evolve information security, IT operations, and compliance programs to protect sensitive data and support growth.
Manage compliance initiatives across HIPAA, GDPR, PIPEDA, and other regulatory frameworks.
Drive security maturity, including SOC 2 and ISO 27001 readiness, and vendor risk management.
Partner company is a healthcare technology organization focused on improving healthcare outcomes. The company is remote-first and growing, with a mission-driven culture.
Coordinate MZLA’s privacy and compliance program work, including planning, recurring reviews, risk tracking, documentation, and leadership reporting.
Translate privacy, security, and compliance requirements into practical processes that fit how MZLA works.
Coordinate vendor and tool reviews with legal, engineering, product, support, finance, operations, and other stakeholders.
Thunderbird is a trusted open-source email application used by over 20 million people. MZLA, the team behind Thunderbird, is a small but growing company of 60+ employees across seven countries, focused on building privacy-respecting communication and productivity tools.
Manage multi-jurisdictional compliance execution including HIPAA, GDPR, PIPEDA, and emerging privacy laws.
Lead IT operations and service delivery including user onboarding, device management, and identity & access management.
Drive vendor risk management and BAA/DPA lifecycle, ensuring breach notification timelines and data deletion commitments.
Practice Better is an all-in-one platform helping health and wellness practitioners run their businesses and scale their impact. We are a remote-first team headquartered in Toronto, made up of curious, driven, and empathetic people, trusted by thousands of practitioners worldwide.
Lead the governance, risk, and compliance function across security policies, standards, risk management, audits, and third-party risk.
Own audit readiness and ongoing compliance programs across frameworks such as SOC 2, ISO 27001, GovRAMP, PCI DSS, HIPAA, NIST CSF, and more.
Manage third-party and supply chain risk management, including vendor security reviews, due diligence, and remediation tracking.
Accela provides government software solutions to improve efficiency, increase citizen engagement, and enable thriving communities. They have been an industry leader for nearly 20 years and are committed to diversity, equity, and inclusion.
Manage the full IT risk lifecycle, including risk registers, identification, assessment, mitigation, and reporting using Power BI dashboards.
Coordinate IT governance activities across cybersecurity, audit, compliance, and business teams to ensure alignment with enterprise risk standards.
Develop executive-level reports and support governance committees with structured presentations and risk insights.
Our partner is a large-scale enterprise operating in a regulated environment, focusing on IT governance, cybersecurity, and risk management. They foster a collaborative, cross-functional culture with a commitment to diversity and equal opportunity.
Own and manage the compliance program including SOC 2 and ISO 27001 readiness and audits.
Lead risk assessments, control testing, and enterprise risk management processes.
Partner with Engineering, Security, Product, Legal, HR, and Operations to embed compliance into business processes.
Calendly is a scheduling platform used by millions to automate meetings and streamline time management. They are a rapidly growing SaaS company fostering a culture of learning and high performance.
Develop and execute privacy and AI governance programs to support responsible innovation in healthcare technology.
Manage cross-functional legal projects with teams across product, engineering, marketing, and policy.
Track evolving regulations and translate them into actionable program updates.
Our partner is a fast-growing healthcare technology organization dedicated to privacy and AI governance. They foster an inclusive culture with a focus on diversity, ethics, wellness, and belonging, and offer fully remote work.
Conduct IT and cybersecurity risk assessments across systems, applications, and business processes.
Lead audit readiness activities for frameworks like SOC 2, HIPAA, and NYDFS.
Manage security policies, third-party vendor assessments, and develop risk dashboards.
Jobgether uses an AI-powered matching process to connect candidates with hiring companies. They focus on efficient, objective application review and are a remote-first organization.
Serve as a subject matter expert on Canadian consumer protection and payment regulations, providing advisory support to Product, Legal, Risk, and Operations teams.
Oversee Canadian regulatory reporting, lead compliance risk assessments, and evaluate control effectiveness to ensure program alignment.
Maintain and enhance Canada-specific policies, procedures, and control documentation while partnering cross-functionally on remediation efforts.
Affirm is reinventing credit to make it more honest and friendly, offering consumers the flexibility to buy now and pay later without hidden fees or compounding interest. We are a global fintech company with a remote-first culture, dedicated to delivering honest financial products.
Own end-to-end management of core privacy programs including data subject requests, privacy impact assessments, and cookie compliance.
Identify and implement process improvements, leveraging AI to automate routine tasks and maintain auditable records.
Serve as a key connector between Privacy Legal, Privacy Engineering, and cross-functional partners to translate global privacy requirements into operations.
Stripe is a financial infrastructure platform for businesses, enabling millions of companies to accept payments and grow revenue. The company is large and mission-driven, with a culture focused on increasing the GDP of the internet.
Serve as a key operational partner to compliance leadership by executing strategic priorities and managing critical program initiatives.
Develop and maintain compliance dashboards, analytics, and reporting tools to provide visibility into program effectiveness and emerging risks.
Partner with teams across commercial, medical, finance, legal, HR, IT, and corporate functions to provide practical compliance guidance.
This role is with a fast-growing healthcare environment, offering the opportunity to shape a modern, risk-based compliance program. The company is a partner-managed organization, but specific size and culture details are not provided.
Support oversight of the existing Privacy compliance program across jurisdictions, with primary focus on U.S. requirements and alignment to global privacy obligations.
Translate Legal guidance and regulatory requirements into policies, standards, and control expectations for first-line teams.
Provide independent oversight and effective challenge of first-line privacy control environments, including review of control design and identification of gaps.
Affirm is reinventing credit to make it more honest and friendly, giving consumers the flexibility to buy now and pay later without any hidden fees or compounding interest. They are a remote-first company with competitive benefits including health care coverage, flexible spending wallets, and stock purchase plans.