IT Manager

The Opportunity

Identity and Access

• Own SaaS access provisioning and deprovisioning, automating processes where safe.
• Administer Google Workspace, SSO, and the password manager.
• Run access reviews and govern contractor and offshore access involving PHI.

Devices and Security Operations

• Own MDM migration, configuration baselines, endpoint policies, and the full device fleet lifecycle.
• Operate email security, endpoint detection, and account protection tooling, including alert triage and detection tuning.
• Own incident response, vulnerability and patch programs, penetration testing, and security awareness training.

Data, Infrastructure, and Service Delivery

• Close the DLP gap and own backup coverage, restore testing, retention policies, legal holds, and discovery support.
• Own network, VPN, DNS, certificates, collaboration platforms, external sharing controls, and AI tool governance.
• Deliver onboarding and offboarding, provide IT support, automate recurring work, and report on service performance, compliance, spend, and risk.

Compliance and Vendors

• Gate new tooling through security and procurement review.
• Produce SOC 2 and HITRUST audit evidence and support customer security questionnaires.
• Own the IT budget, vendor negotiations, and renewals.

About You

• 5+ years of experience in IT operations or IT security.
• Hands-on ownership of endpoint management and identity for a distributed team.
• Direct experience with email security and endpoint detection tooling.
• Strong Google Workspace administration, including security and conditional access controls.
• Practical experience with firewalls, wireless, VPN, DNS, and certificates.
• Working knowledge of SOC 2, HIPAA, HITRUST, or a comparable framework and audit evidence requirements.
• Scripting or automation ability to build and maintain internal workflows.
• Ability to operate as the sole owner of a function.

Nice to Have

• Healthcare or regulated-environment experience handling PHI or PII.
• HITRUST readiness or certification experience.
• Vanta or comparable compliance automation experience.
• Multi-entity or cross-border operations experience.

Success in This Role

• Within 30 days, establish infrastructure, MSP, and vendor visibility and draft an MSP transition plan.
• Within 60 days, begin the MSP handover and pilot device management and email security across the fleet.
• Within 90 days, retire the MSP relationship and deploy device management and email security with provisioning automation.
• Long term, build a secure, documented, fully in-house IT function that scales with the company.

Location

• This is a hybrid position based at the Toronto office, with in-person work required 2–3 days per week according to operational needs.
• Occasional travel is expected for customer meetings, partner discussions, and industry events.
• Remote candidates may be considered on an exceptional basis based on experience.

Compensation

• The salary range is CAD $85,000–$110,000 annually.
• Compensation is determined by experience, skills, and alignment to the role's scope.