Senior GRC Manager: Audit, Risk & Compliance Leader

Fullscript; Ottawa; Hybrid; CAD 140,000 - 165,000; Full time

Benefits offered by this job

RRSP match program

Flexible benefits package

Training budget and learning

Discount on Fullscript catalog

Wherever You Work Well

Job summary

Fullscript in Ottawa is seeking an experienced Governance, Risk & Compliance (GRC) Manager to lead and mature our security compliance program. This hands-on leadership role manages a two-person GRC team and drives compliance across SOC 2 Type II, PCI DSS, and HITRUST.

You’ll work with Security, Engineering, Privacy, Legal, Product, and IT to translate regulatory and customer requirements into practical security controls, balancing strategic program ownership with day-to-day execution in a

Qualifications

• 7+ years of experience in Governance, Risk & Compliance, Information Security, IT Audit, or Security Compliance.
• Experience leading small, high-performing teams.
• Hands-on enterprise compliance program ownership within SaaS/healthcare tech.

Responsibilities

• Lead and mature Fullscript's GRC program across SOC 2 Type II, PCI DSS, and HITRUST.
• Manage external audits and internal control readiness.
• Partner with Security, Privacy, Legal, Product, Engineering, and IT to implement controls.

Skills

Governance

Risk management

Compliance

Audits

Team leadership

Tools

Vanta

Drata

OneTrust

Job description

Fullscript in Ottawa is seeking an experienced Governance, Risk & Compliance (GRC) Manager to lead and mature our security compliance program. This hands-on leadership role manages a two-person GRC team and drives compliance across SOC 2 Type II, PCI DSS, and HITRUST.

You’ll work with Security, Engineering, Privacy, Legal, Product, and IT to translate regulatory and customer requirements into practical security controls, balancing strategic program ownership with day-to-day execution in a