Senior Manager, Infosec, IT & Compliance

Ready to make a real impact on global health and wellness care? Practice Better is an all-in-one platform helping health and wellness practitioners run their businesses, care for their clients, and scale their impact. Founded by practitioners in 2016, we’re now the leading EHR and practice management platform in the wellness industry, trusted by tens of thousands of practitioners across 70+ countries. In 2023, we expanded our whole-practice care offering through the acquisition of That Clean Life, bringing nutrition planning into our platform. We’re a remote-first team headquartered in Toronto, made up of curious, driven, and empathetic people building tools that help practitioners create sustainable, independent practices; and do the most meaningful work of their careers. While most of our work happens remotely, we come together regularly for off-sites and team events to stay connected and build together. Important notice to our applicants and job seekers: We've become aware of fraudulent messages impersonating Practice Better's recruitment team. Please note: Practice Better will never ask for payment, banking details, or personal financial information at any stage of the hiring process All official communication comes from @practicebetter.io email addresses We will never ask you to purchase equipment, software, or gift cards We will never conduct interviews solely via text message or WhatsApp If something feels off, trust your instincts. Verify any suspicious outreach by contacting us directly at careers@practicebetter.io before taking any action. Thank you for helping us keep our hiring process safe and transparent.Position Summary We are looking for a Senior Manager, Information Security, IT, and Compliance to join our growing team. As a Business Associate to thousands of healthcare practitioners globally, Practice Better operates in a complex regulatory environment spanning HIPAA, GDPR/UK GDPR, and many more existing and emerging state privacy laws. We take our role as a trusted steward of protected health information (PHI) and personal data seriously — and we need someone to manage that responsibility with rigor, sound judgment, and operational excellence, reporting directly to our VP of Engineering. In this role, you'll manage three interconnected pillars: Information Security, IT Operations, and Compliance. You'll drive day-to-day execution of our compliance program - supporting vendor BAA/DPA negotiations and the implementation of multi-jurisdictional privacy frameworks, maturing our security posture and anticipating regulatory gaps. You'll also manage IT operations, including user provisioning/deprovisioning, device management, SaaS vendor rationalization, and identity & access management. You'll partner closely with Engineering, Product, Legal, and Customer Success to embed privacy-by-design principles into our product roadmap, drive operational security improvements, and ensure we stay ahead of evolving compliance requirements ...