Security & Compliance Partner

About PurposeMed

PurposeMed operates several healthcare brands including Freddie (sexual health for LGBTQ2S+ community), Frida (adult ADHD diagnosis and treatment), Foria (gender-affirming healthcare), and Affirming Care Pharmacy (specialty prescription delivery). Ranked #2 on Deloitte's 2024 list of Canada's 50 fastest-growing tech companies and recognized as one of Canada's Most Admired Corporate Cultures.

Role Overview

This is a permanent, full-time remote position open to candidates across Canada. You'll work closely with Engineering, Product, Legal, and Marketing to identify risks, close security gaps, and embed security thinking throughout the organization.

Key Responsibilities

• Own security monitoring and incident detection across cloud infrastructure and SaaS tooling, including AI-powered tools
• Lead incident response from initial containment through documentation and lessons learned
• Work with Product, Design, and Engineering to identify security gaps and support vulnerability assessments
• Contribute to compliance initiatives including penetration testing
• Collaborate with Marketing on data collection, consent practices, and ad-tech compliance
• Implement and improve preventative security controls including MFA, access management, logging, and endpoint protection
• Support audit and compliance activities (HIPAA, PIPEDA) in partnership with IT and Legal
• Lead vendor and third-party security reviews