Senior Manager, IT

PocketHealth; United States; On-site; CAD 150,000 - 190,000; Full time

Benefits offered by this job

Stock options

Comprehensive benefits package

Job summary

PocketHealth is seeking a senior IT operations and security leader to own and secure our IT and security programs. You’ll drive SOC 2 Type II audits, coordinate with our SOC and CISO functions, and manage onboarding/offboarding while scaling our security posture across SaaS tools like Google Workspace, Okta, and Zoom.

You’ll lead a small team, set IT strategy, and partner with Legal, Engineering and our CTO to balance risk with a positive employee experience. Healthcare familiarity is a plus.

Qualifications

• 7+ years in IT operations and/or IT security, including experience managing at least one direct report.
• Hands-on experience owning or leading SOC 2 Type II audits.
• Experience with Drata, or a similar compliance automation tool such as Drata or Secureframe.
• Deep experience running SaaS tools at scale, especially Google Workspace, Okta, Mosyle (or a similar device management tool), Slack and Zoom.
• A strong grasp of access management, laptop and device security, networking, and cloud basics. AWS exposure is an asset.
• Experience at a startup or fast-growing tech company. You’re comfortable with fast turnaround and changing priorities.
• Comfortable using AI tools in your own work, and able to judge where they’re safe to use across the company.
• Able to turn a control requirement into a clear policy people will actually follow, and to explain risk in plain language to staff and executives alike.
• Detail-oriented and practical. You balance security with a good employee experience.
• A degree in Computer Science, IT or a related field, or equivalent experience.
• Experience in healthcare or another regulated industry, and familiarity with HIPAA and PHIPA.

Responsibilities

• Own, run, and secure our SaaS tools, including access controls, single sign-on and multi-factor login, device management, and protection for company equipment.
• Stay abreast of emerging cyber threats, and lead phishing prevention and security awareness initiatives.
• Serve as the main point of contact with our managed SOC and CISO function, ensuring coordination with our in-house IT function.
• Coordinate with HR on onboarding and offboarding, so new hires have what they need on day one and departing employees lose access right away.
• Work with Finance to manage our device fleet, IT budget and vendors.
• Test and roll out new tools with the right security and privacy safeguards in place.
• Handle the harder technical issues, and build documentation and processes that cut down on repeat problems.
• Own our internal IT plan and roadmap, so that spending on tools, security and privacy supports our business objectives.
• Manage and coach our IT team, setting clear priorities and helping them grow.
• Work with Legal, Engineering, and our CTO on security priorities, so that internal IT and engineering security stay aligned.
• Develop a cadence to report regularly to leadership on IT performance, security risks and compliance status, with clear recommendations and tradeoffs.
• Build systems and processes that scale as we grow, so IT doesn’t become a bottleneck.

Skills

IT operations

IT security

SOC 2 Type II

Audit management

Drata

Secureframe

Google Workspace

Okta

Slack

Zoom

Access management

Device security

Networking basics

Cloud basics

AWS exposure

Startup experience

AI tools usage

Policy writing

Risk communication

Education

CS/IT degree

Tools

Drata

Secureframe

Job description

About PocketHealth

What if you could personally impact the future of healthcare? As part of the PocketHealth team, you will enable hospitals and clinics across North America — and more importantly, empower over 3 million patients — to discover a better healthcare experience.

About PocketHealth

What if you could personally impact the future of healthcare? As part of the PocketHealth team, you will enable hospitals and clinics across North America — and more importantly, empower over 3 million patients — to discover a better healthcare experience.

PocketHealth automates the operational complexity of healthcare: the manual, non-clinical work that surrounds every patient visit. For more than a decade, the company has automated this work from both the provider and patient sides, building a distinct understanding of how providers operate and how patients engage in their care. Its agentic operations platform extends that expertise across the enterprise, automating non‑clinical workflows end‑to‑end while working inside existing systems and adapting to each site’s SOPs. The result: improved capacity, financial performance and patient outcomes. PocketHealth is SOC 2 and HIPAA and PHIPA compliant, and trusted by 900+ health systems.

About The Role

The work falls into three related IT domains: ensuring continuity and security of our business systems, managing and executing our compliance program, and leading our in‑house IT function. Day to day, you’ll split your time between setting direction and hands‑on work to make that direction a reality.

This job posting reports to the Senior Director, Legal and Compliance, and is for an existing vacancy. The salary range for this position is $150,000 – $190,000 annually, depending on the experience and expertise you bring to the team. Salary is just one part of the story; this role is also eligible for equity in the form of stock options and includes a comprehensive health and benefits package. We view our compensation as a total investment in your well‑being, designed to support you both in your work and in your life outside of it.

What You’ll Do

Operations and Security

You’ll own the systems our team relies on every day, and make sure they’re reliable, secure and easy to use. When someone can’t get into a tool or a laptop fails before a customer call, you and your team are who they turn to.

• Own, run and secure our SaaS tools, including access controls, single sign‑on and multi‑factor login, device management, and protection for company equipment.
• Stay abreast of emerging cyber threats, and lead phishing prevention and security awareness initiatives.
• Serve as the main point of contact with our managed SOC and CISO function, ensuring coordination with our in‑house IT function.
• Coordinate with HR on onboarding and offboarding, so new hires have what they need on day one and departing employees lose access right away.
• Work with Finance to manage our device fleet, IT budget and vendors.
• Test and roll out new tools with the right security and privacy safeguards in place.
• Handle the harder technical issues, and build documentation and processes that cut down on repeat problems.

Compliance

Our SOC 2 program has been through several audit cycles. Your job is to make it run better. You’ll make compliance more efficient and less disruptive for the team, while keeping the standard our healthcare customers expect.

• Own and execute the IT components of our SOC 2 Type II program and make it better each cycle. Find ways to streamline evidence collection, automate more controls in Drata, and make each audit easier on the team than the last.
• Manage the annual audit with our external auditors, and keep control owners across the company accountable all year.
• Run regular compliance tasks: quarterly access reviews, security awareness training, vendor risk assessments and policy sign‑offs.
• Work with Engineering and Legal on privacy requirements (HIPAA, PHIPA) as they apply to our internal systems.
• Help Sales and Solutions Engineering answer customer security questionnaires and audit requests.

Team Leadership

You’ll set the direction for IT at PocketHealth and lead a small, hands‑on team. You’ll also be the person leadership turns to for a clear view of where IT and security stand, what the risks are, and where to invest next.

• Own our internal IT plan and roadmap, so that spending on tools, security and privacy supports our business objectives.
• Manage and coach our IT team, setting clear priorities and helping them grow.
• Work with Legal, Engineering, and our CTO on security priorities, so that internal IT and engineering security stay aligned.
• Develop a cadence to report regularly to leadership on IT performance, security risks and compliance status, with clear recommendations and tradeoffs.
• Build systems and processes that scale as we grow, so IT doesn’t become a bottleneck.

What We’re Looking For

• 7+ years in IT operations and/or IT security, including experience managing at least one direct report.
• Hands‑on experience owning or leading SOC 2 Type II audits, ideally including improving an existing program rather than only standing one up.
• Experience with Drata, or a similar compliance automation tool such as Drata or Secureframe.
• Deep experience running SaaS tools at scale, especially Google Workspace, Okta, Mosyle (or a similar device management tool), Slack and Zoom.
• A strong grasp of access management, laptop and device security, networking, and cloud basics. AWS exposure is an asset.
• Experience at a startup or fast‑growing tech company. You’re comfortable with fast turnaround and changing priorities.
• Comfortable using AI tools in your own work, and able to judge where they’re safe to use across the company.
• Able to turn a control requirement into a clear policy people will actually follow, and to explain risk in plain language to staff and executives alike.
• Detail‑oriented and practical. You balance security with a good employee experience.
• A degree in Computer Science, IT or a related field, or equivalent experience.
• Experience in healthcare or another regulated industry, and familiarity with HIPAA and PHIPA.

You can do amazing things at PocketHealth. You can positively impact the healthcare journey for millions of people, while building your career and developing your skills. It doesn’t have to be one or the other. It has been a part of our mission since our founding to empower patients & make healthcare accessible to all, and we know this can only be achieved with a team of diverse perspectives that is representative of the Patient & Provider communities we serve.

People love working here for these reasons and more:

• our competitive salaries and benefits (including stock options for every employee!)
• four weeks of paid time off
• unlimited paid wellness days
• extended mental health coverage
• 16 weeks of parental leave top‑up
• we host a social to bring all employees together in‑person twice a year!

We’re proud to foster a culture that embraces diversity, equity, and inclusion, and we believe in caring for our employees with the same thoughtfulness we offer our Patients & Providers.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.