Technical Program Manager, Security Job at Fullscript (Ottawa)

Technical Program Manager, Security

Fullscript

Location:
Canada , Ottawa ▼
Toronto
Calgary

Category:
IT - Administration

Contract Type:
Not provided

Salary:

145000.00 - 185000.00 CAD / Year

Save Job

Apply Position

Job Description:

We’re seeking a Technical Program Manager to lead our most critical security programs, operating at the intersection of security engineering, compliance, and cross-functional delivery. This is a high-impact individual contributor role responsible for defining and running the operating model for how security programs are planned, executed, and scaled at Fullscript.

Job Responsibility:

Own the security program portfolio
Own the end-to-end security program roadmap, balancing short-term risk reduction with long-term security maturity
Translate security strategy, risk posture, and compliance requirements into clear, prioritized, and executable programs
Establish durable planning rhythms, milestones, and success metrics for security initiatives
Lead security engineering programs
Own the Vulnerability Management program, including prioritization frameworks, remediation tracking, and executive-level reporting
Coordinate internal and external Penetration Tests, from scoping and scheduling through remediation and closure
Partner with engineering and infrastructure teams to ensure security findings are addressed efficiently and sustainably
Drive compliance & audit readiness
Serve as the primary program-level owner for SOC 2 execution and readiness, coordinating timelines, evidence collection, and cross-team accountability
Partner with Compliance and Security to reduce audit friction through better processes, documentation, and tooling
Identify systemic audit gaps and lead programs to close them long-term, not just for the next audit cycle
Establish scalable operating models
Design and evolve the operating model for security programs, ensuring work scales as Fullscript grows
Identify recurring pain points and implement structural improvements to reduce manual coordination and rework
Ensure security programs are predictable, measurable, and transparent
Communicate with clarity and trust
Communicate program status, risks, and tradeoffs clearly to senior leaders and stakeholders
Create and maintain high-quality program documentation, including plans, timelines, and decision records
Build trust through proactive communication, follow-through, and shared accountability

Requirements:

Deep experience leading complex, cross-functional technical programs in security, infrastructure, or highly regulated domains
Proven ability to operate at both strategic and execution levels, without losing sight of delivery
Strong technical fluency that enables effective partnership with security and engineering teams
Comfort navigating ambiguity and making sound judgment calls in risk-based environments
Exceptional communication skills and the ability to influence without direct authority
A mindset rooted in ownership, transparency, and continuous improvement

Nice to have:

Direct experience supporting SOC 2, or similar security compliance frameworks
Familiarity with vulnerability management tools, penetration testing workflows, or security incident processes
Experience working in cloud-based environments and modern CI/CD pipelines
Background in health-tech, fintech, or other highly regulated industries
Experience scaling security programs in a growing organization

What we offer:

stock options
wellness stipends

Additional Information:

Job Posted:
January 16, 2026

Employment Type:

Fulltime

Work Type:

Remote work

Fullscript - All Job Offers

Job Link Share: