Senior IT & Security Lead — Hybrid, SOC 2/HITRUST Ready

Medme-Health; Toronto; Hybrid; CAD 85,000 - 110,000; Full time

Benefits offered by this job

Comprehensive Health Benefits

Group RRSP

Professional Development

Work-from-Home Stipend

Office Closure for Holidays

Company Retreats

Job summary

MedMe Health in Toronto is hiring its first dedicated IT hire to build and operate an in-house IT and security function. You’ll shape how IT works, own security tooling, and run day-to-day operations across two countries.

You will manage identity, devices, and data protection, drive HITRUST-aligned controls, and own vendor relationships while enabling scalable, compliant IT services for a growing health-tech platform used by thousands of pharmacies across North America.

Qualifications

• 5+ years in IT operations or IT security with hands-on ownership of endpoint management and identity for a distributed team.
• Direct experience deploying and operating email security and endpoint detection tooling.
• Strong Google Workspace administration, including security and conditional access controls.

Responsibilities

• Identity and access: Own provisioning and deprovisioning across the SaaS environment; administer Google Workspace, SSO, and password manager; conduct access reviews and govern contractor access.
• Devices and endpoints: Own the MDM platform migration, configuration baselines, endpoint policy; manage device fleet lifecycle; build endpoint controls to HITRUST-ready standard.
• Security operations: Operate email security, endpoint detection, and account protection tooling; own incident response, escalation, remediation, and post-incident review.
• Data protection and resilience: Close DLP gaps; own backup coverage, restore testing, retention policies, and legal hold support.
• Infrastructure and workplace technology: Manage network, VPN, DNS, certificate management; administer collaboration platforms and AI tool adoption.
• Service delivery: IT onboarding/offboarding; act as support contact; report monthly on service performance and security metrics.
• Compliance and vendor management: Gate tooling through security/procurement review; provide audit evidence for SOC 2 and HITRUST; manage IT budget and vendor renewals.

Skills

IT operations

IT security

Google Workspace admin

SOC 2 / HIPAA knowledge

Automation scripting

Vulnerability management

Network fundamentals

Tools

Google Workspace

Job description

MedMe Health in Toronto is hiring its first dedicated IT hire to build and operate an in-house IT and security function. You’ll shape how IT works, own security tooling, and run day-to-day operations across two countries.

You will manage identity, devices, and data protection, drive HITRUST-aligned controls, and own vendor relationships while enabling scalable, compliant IT services for a growing health-tech platform used by thousands of pharmacies across North America.