Senior Manager, Infosec, IT & Compliance

Ready to make a real impact on global health and wellness care? Practice Better is an all-in-one platform helping health and wellness practitioners run their businesses, care for their clients, and scale their impact. Founded by practitioners in 2016, we’re now the leading EHR and practice management platform in the wellness industry, trusted by tens of thousands of practitioners across 70+ countries.

In 2023, we expanded our whole-practice care offering through the acquisition of That Clean Life, bringing nutrition planning into our platform. We’re a remote-first team headquartered in Toronto, made up of curious, driven, and empathetic people building tools that help practitioners create sustainable, independent practices; and do the most meaningful work of their careers. While most of our work happens remotely, we come together regularly for off-sites and team events to stay connected and build together.

Important notice to our applicants and job seekers: We've become aware of fraudulent messages impersonating Practice Better's recruitment team. io email addresses We will never ask you to purchase equipment, software, or gift cards We will never conduct interviews solely via text message or WhatsApp If something feels off, trust your instincts. io before taking any action.

Thank you for helping us keep our hiring process safe and transparent. Position Summary We are looking for a Senior Manager, Information Security, IT, and Compliance to join our growing team. As a Business Associate to thousands of healthcare practitioners globally, Practice Better operates in a complex regulatory environment spanning HIPAA, GDPR/UK GDPR, and many more existing and emerging state privacy laws.

We take our role as a trusted steward of protected health information (PHI) and personal data seriously — and we need someone to manage that responsibility with rigor, sound judgment, and operational excellence, reporting directly to our VP of Engineering. In this role, you'll manage three interconnected pillars: Information Security, IT Operations, and Compliance. You'll drive day-to-day execution of our compliance program - supporting vendor BAA/DPA negotiations and the implementation of multi-jurisdictional privacy frameworks, maturing our security posture and anticipating regulatory gaps.

You'll also manage IT operations, including user provisioning/deprovisioning, device management, SaaS vendor rationalization, and identity access management.

Requirements

as we scale. The ideal candidate brings strong working knowledge of healthcare compliance (HIPAA/HITECH), European data protection (GDPR), and SaaS security frameworks (SOC 2, ISO 27001), combined with hands-on experience managing IT operations in a remote-first, high-growth environment.

into practical engineering workflows, and navigating ambiguous privacy and security decisions with good judgment. You understand that compliance is not a checkbox exercise — it's a business enabler that protects our customers, and earns their trust. Note: Practice Better is a remote-first company with team members across North America.

This particular role is currently open to Canadian-based candidates only, and candidates must be legally entitled to work for any employer in Canada. Practice Better is unable to support sponsorship for work permits or visas at this time.