Technical Program Manager Security

Fullscript; Ottawa; On-site; CAD 145,000 - 185,000; Full time

Job summary

A health technology company in Ottawa is seeking a Security Program Manager to oversee their security program portfolio. This role involves leading the Vulnerability Management program and serving as the main contact for SOC 2 execution. The ideal candidate has extensive experience in security programs and exceptional communication skills. This opportunity offers a collaborative environment focused on team success and a meaningful impact on security compliance.

Qualifications

• Experience in security or highly regulated domains.
• Ability to navigate ambiguity and make sound judgments.
• Comfort with cross-functional collaboration.

Responsibilities

• Own the security program portfolio and roadmap.
• Lead the Vulnerability Management program.
• Serve as the primary program-level owner for SOC 2.

Skills

Deep experience leading complex, cross-functional technical programs

Proven ability to operate at both strategic and execution levels

Strong technical fluency

Exceptional communication skills

Tools

Vulnerability management tools

Penetration testing workflows

Job description

Employer Industry: Health Technology

Why consider this job opportunity:

• Salary range between $145,000 CAD and $185,000 CAD
• Opportunity for career advancement and growth within the organization
• Collaborative and supportive work environment focused on team success
• Chance to make a meaningful impact on security programs and compliance
• High level of ownership and autonomy in a critical role
• Work with a mission-driven team dedicated to improving healthcare

What to Expect (Job Responsibilities):

• Own the security program portfolio and manage the end-to-end security program roadmap
• Lead the Vulnerability Management program, including remediation tracking and reporting
• Serve as the primary program-level owner for SOC 2 execution and readiness
• Design and evolve scalable operating models for security programs
• Communicate program status, risks, and tradeoffs to senior leaders and stakeholders

What is Required (Qualifications):

• Deep experience leading complex, cross-functional technical programs in security or highly regulated domains
• Proven ability to operate at both strategic and execution levels
• Strong technical fluency for effective partnership with security and engineering teams
• Comfort navigating ambiguity and making sound judgment calls in risk-based environments
• Exceptional communication skills and ability to influence without direct authority

How to Stand Out (Preferred Qualifications):

• Direct experience supporting SOC 2 or similar security compliance frameworks
• Familiarity with vulnerability management tools and penetration testing workflows
• Experience working in cloud-based environments and modern CI/CD pipelines
• Background in health-tech, fintech, or other highly regulated industries
• Experience scaling security programs in a growing organization

We prioritize candidate privacy and champion equal‑opportunity employment. Central to our mission is our partnership with companies that share this commitment. We aim to foster a fair, transparent, and secure hiring environment for all. If you encounter any employer not adhering to these principles, please bring it to our attention immediately.