Audit & Assurance

• Lead all external compliance audits, including planning, evidence collection, auditor coordination, issue resolution, and successful certification.
• Manage internal control assessments and readiness activities throughout the year.
• Coordinate remediation efforts across Engineering, IT, Security, and business teams.
• Own relationships with external auditors and assessment firms.
• Develop reporting and dashboards that communicate compliance posture and audit readiness to leadership.

Risk Management

• Partner with Security leadership to mature enterprise security risk management.
• Maintain risk registers and facilitate risk assessments across technology and business functions.
• Drive remediation planning and track progress through completion.
• Support third-party risk management activities as required.

Cross-Functional Partnership

• Build strong partnerships with Privacy and Legal to ensure alignment between security, regulatory, and privacy obligations.
• Partner with Product, Engineering, Infrastructure, and IT to operationalize security controls.
• Support customer security reviews, due diligence requests, and compliance questionnaires.
• Provide practical guidance that enables business growth while maintaining an appropriate risk posture.

Leadership

• Lead, coach, and develop a team of two GRC professionals.
• Establish team priorities, operating cadence, and professional development plans.
• Foster a culture of accountability, continuous improvement, and operational excellence.
• Remain actively involved in execution, serving as a working manager who contributes directly to audits, control implementation, and compliance initiatives.

What You Bring

• 7+ years of experience in Governance, Risk & Compliance, Information Security, IT Audit, or Security Compliance.
• Previous people management experience leading small, high-performing teams.
• Hands-on experience owning enterprise compliance programs within SaaS or healthcare technology organizations.
• Demonstrated success leading external audits for:

• SOC 2 Type II
• PCI DSS
• HITRUST 
• GDPR

• Familiarity with HIPAA and its requirements.
• Experience coordinating multiple concurrent compliance initiatives across engineering and business stakeholders.
• Strong understanding of security frameworks including NIST CSF, CIS Controls, ISO 27001, and HITRUST.
• Experience partnering closely with Privacy and Legal teams on regulatory compliance initiatives.
• Experience managing control evidence, remediation programs, and continuous compliance activities.
• Strong project management and organizational skills with the ability to manage competing priorities.
• Excellent written and verbal communication skills, with the ability to translate complex compliance requirements into practical business guidance.

Nice to Have

• Healthcare or health technology experience.
• Experience with GRC platforms such as Vanta, Drata, OneTrust, or similar.
• Professional certifications such as CISSP, CISA, CRISC, CISM, HITRUST CCSFP, PCI ISA/QSA, or ISO 27001 Lead Auditor.
• Experience supporting customer security reviews and enterprise sales due diligence.

Why This Role Matters

Trust is one of Fullscript's most important products. As our GRC Manager, you'll help ensure that our security and compliance programs scale alongside the business, enabling innovation while maintaining the confidence of our customers, partners, and regulators. You'll have the opportunity to shape the future of our compliance program, mentor a growing team, and influence security strategy across the organization.

What We Can Offer You

• Generous PTO and competitive pay
• Fullscript’s RRSP match program for financial health
• Flexible benefits package and workplace wellness program
• Training budget and company-wide learning initiatives
• Discount on Fullscript catalog of products
• Ability to work Wherever You Work Well*

Our Wherever You Work Well philosophy means Fullscript teammates get to pick their own office — whether that’s in-office, at home, or a bit of both 🐶🏡

Compensation range

The salary range for this role is between $140,000 and $165,000 CAD. Fullscript shares salary ranges to support transparency and help candidates make informed decisions. The range shown reflects base salary only. Additional incentives, perks, and benefits may be available as part of Fullscript’s total rewards package.

Final base salary depends on experience, skills, and location. We review pay regularly to stay aligned with market data and internal equity. Benefits and total rewards may vary by region.

Why Fullscript

Great work happens when people feel supported, trusted, and inspired. At Fullscript, we stay curious and keep finding smarter ways to make care better. We grow together, take on new challenges, and focus on impact. We put people first, work as a team, and leave egos at the door.

What to Know Before You Apply

We’re grateful for the interest in joining Fullscript. To make sure your application reaches our hiring team, please apply directly through our careers page.

A quick note:

Due to the high volume of applications, we’re not able to respond to phone or email inquiries about application status. If there’s a match, our team will reach out directly.

Fullscript is an equal opportunity employer committed to creating an inclusive workplace. Accommodations are available upon request at [email protected].

All offers are contingent on successful background checks conducted in compliance with federal, state, and provincial laws.

We use AI tools to support parts of the hiring process, including screening and reviewing responses. Final hiring decisions are always made by people and follow all applicable privacy and employment laws in Canada and the U.S.

Learn More

www.fullscript.com

@fullscriptHQ

on instagram

Let’s make healthcare whole