About Surgical Safety Technologies:

Surgical Safety Technologies Inc. (SST) is a fast-growing healthcare technology start-up located in the heart of Toronto, Canada. SST's OR Black Box® is a platform that captures some of the world's most valuable data from surgery and allows hospitals to identify, understand, and mitigate risk. The OR Black Box® is implemented in several of the most prestigious hospitals in North America and Europe and was named one of Time magazine's Best Inventions of 2019. We are a dynamic and mission-driven organization that aims to improve quality of healthcare and save lives of surgical patients around the world. If you share the same values, we encourage you to connect with us.

The Opportunity

We are seeking a talented Governance, Risk and Compliance Manager (GRCM) to support our team. As SST's GRCM, you will be responsible for all facets of the Company's governance, risk and compliance policies. You will continually assess the IT controls to mitigate risk as the Company evolves. You will ensure the Company is SOC 2, HIPAA and GDRP compliant.

Responsibilities:

Design implement and lead risk management strategy relating to cybersecurity for the organization.
Define and quantify the organization's risk tolerance for cyber-related risks and ensure the risk approach adheres accordingly.
Lead the team to test the implementation of Risk treatment plans.
Work with external auditors to facilitate and complete the annual SOC 2 audit.
Work with other teams to regularly assess and test the effectiveness and efficiency of controls and create GRC reports.
Oversea third-party supplier risk program to recommend compensating controls or risk mitigation techniques to reduce inherent risk within business operations.
Prepare, track and maintain risk acceptances and security exceptions.
Leverage expertise in Information Security Management to prepare and conduct security assessments for both planned initiatives and unplanned instances.
Provide security awareness training across the organization.
Create and update technical documents in line with company policies.
Ensure that effective BCP/DR policies and plans are in place and maintained.
Weigh business needs against security concerns to help guide the business to make practical and informed risk decisions.
Lead projects/engagements, have report-writing and presentation skills and the ability to clearly explain findings to both technical and nontechnical audiences.

Qualifications:

5+ years of experience working with risk assessments, security controls, and compliance audits.
Understanding of effective security controls at the systems, network, and application level and how to apply with cloud-based services.
Knowledge of industry standard control frameworks and guidelines.
Experience applying risk management principles to security organizations.
Experience with vendor security reviews and security terms in vendor contracts.
Hold a professional certification (CIA, CISA, CISM, etc).
Excellent knowledge of IT Controls, IT Security, and strong knowledge of COBIT.
Ability to interact effectively and comfortably with senior management and build strong collaborative relationships with various lines of business.

Upsides:

By joining as one of our early team members, there are enormous opportunities ahead for you to have an outsized impact and shape the future of the company.
A lot of room to grow - the technology team will be orders of magnitude larger within a few years, and you will be at the foundation of that team.
The opportunity to change the way surgery is practiced around the world and witness the impact of your work on the lives of surgical patients globally.
A high-performance, collaborative, diverse, and inclusive team.
Beautiful office in downtown Toronto – one of the largest and most vibrant metropolitan centers in North America.

As an equal opportunity employer, Surgical Safety Technologies Inc is committed to providing all employees with a safe working environment free of discrimination and harassment. All employment decisions are based on business needs, job requirements, and individual qualifications, and are not influenced by race, ethnicity, religion, sex, sexual orientation, gender, gender identity/expression, age, disability, marital or relationship status, medical history, or any other protected grounds under human rights legislation. SST continues to celebrate diversity and inclusion, and encourages all applicants to apply.

Surgical Safety Technologies Inc.

New Jobs

Governance, Risk, and Compliance Manager