HHiring Reality
← Fullscript

Governance, Risk & Compliance (GRC) Manager

Fullscript
Location
Ottawa, ON
Posted
18 days ago
Department
Security
What they actually want (must-haves)
  • 7+ years of experience in Governance, Risk & Compliance, Information Security, IT Audit, or Security Compliance
  • Previous people management experience leading small, high-performing teams
  • Hands-on experience owning enterprise compliance programs within SaaS or healthcare technology organizations
  • Demonstrated success leading external audits for SOC 2 Type II, PCI DSS, HITRUST, and GDPR
  • Familiarity with HIPAA and its requirements
  • Experience coordinating multiple concurrent compliance initiatives across engineering and business stakeholders
Nice to have
  • Healthcare or health technology experience
  • Experience with GRC platforms such as Vanta, Drata, OneTrust, or similar
  • Professional certifications such as CISSP, CISA, CRISC, CISM, HITRUST CCSFP, PCI ISA/QSA, or ISO 27001 Lead Auditor
  • Experience supporting customer security reviews and enterprise sales due diligence
What the job really is

The Governance, Risk & Compliance (GRC) Manager at Fullscript will lead the security compliance program, managing a team of two GRC professionals. This role involves overseeing compliance across frameworks like SOC 2 Type II, PCI DSS, and HITRUST, leading audits, and collaborating with various departments to implement security practices. The ideal candidate will balance strategic oversight with hands-on execution in a fast-paced SaaS environment.

Benefits
  • Generous PTO and competitive pay
  • Fullscript's RRSP match program for financial health
  • Flexible benefits package and workplace wellness program
  • Training budget and company-wide learning initiatives
  • Discount on Fullscript catalog of products
  • Ability to work Wherever You Work Well
Things to weigh
  • No specific mention of remote work policies beyond flexibility
  • The role requires balancing strategic and hands-on tasks, which may lead to a demanding workload
  • The salary range is provided, but final compensation depends on experience, skills, and location
  • The company uses AI tools in the hiring process, which may affect candidate experience
Job score3.2/5
Benefits3/5
Freshness4/5
Career value4/5
Role clarity5/5
Pay transparency0/5

Applying to Fullscript?

See how your résumé matches this role — and tailor it from what actually gets interviews.

Calculate resume scoreGenerate resume to apply
Job Link →