The OpportunityMedMe is building out a dedicated, in-house IT and internal security function to support our growing team. You'll step into a role with established tooling and processes already in place across device management, endpoint detection, email security, and access automation, and will take ownership of operating and evolving this function going forward.This is our first dedicated IT hire. You'll inherit a stack to deploy, a fleet across two countries, and a compliance path running from SOC 2 toward HITRUST. The role combines architecture and execution: you'll design how IT works here and also be the one running it day to day.About MedMe HealthAt MedMe, we are passionate about empowering pharmacists to provide services beyond just prescribing. Our mission is to build an all-in-one cloud-based platform that enables pharmacists to schedule, document, and manage clinical services at scale. With over 4,500 pharmacies using our software, we've facilitated more than 25 million patient services, transforming pharmacies into community health hubs across North America.What You'll DoIdentity and accessOwn access provisioning and deprovisioning across the SaaS environment, automating wherever it's protected to do soAdminister Google Workspace, SSO, and the password managerRun access reviews to audit-ready standard, and govern contractor and offshore access against our customer commitments on PHIDevices and endpointsOwn the MDM platform: migration off our current provider, configuration baselines, endpoint policyManage the device fleet lifecycle end to end, procurement support, cross-border logistics, secure disposalBuild endpoint controls to HITRUST-ready standardSecurity operationsOperate email security, endpoint detection, and account protection tooling: detection tuning, alert triageOwn incident response, escalation, remediation, communication, post-incident reviewManage vulnerability and patch programs, external penetration testing, and security awareness trainingData protection and resilienceClose our current DLP gap, recommending tooling or compensating controlsOwn backup coverage, restore testing, and documented recovery proceduresMaintain retention policies and support legal hold and discovery requestsInfrastructure and workplace technologyOwn network, VPN, DNS, and certificate managementAdminister the collaboration platforms the company runs on, permissions, external sharing controlsGovern AI tool adoption: sanctioned tools, data handling review, detection of unapproved useService deliveryOwn IT onboarding and offboarding to a consistent, documented standardAct as the point of contact for support, reducing recurring volume through automation and self-serve documentationReport monthly on service performance, endpoint compliance, spend,



and open riskCompliance and vendor managementGate new tooling through security and procurement reviewProduce audit evidence for SOC 2 and HITRUST, and support customer security questionnaires alongside Security and LegalOwn the IT budget, including vendor negotiations and renewalsAbout You5+ years in IT operations or IT security, with hands-on ownership of endpoint management and identity for a distributed teamDirect experience deploying and operating email security and endpoint detection toolingStrong Google Workspace administration, including security and conditional access controlsPractical networking experience: firewall, wireless, VPN, DNS, certificatesWorking knowledge of SOC 2, HIPAA, HITRUST, or a comparable framework, including audit evidence requirementsScripting or automation ability sufficient to build and maintain internal workflowsComfort operating as the sole owner of a functionNice to Have: Healthcare or another regulated environment handling PHI or PII; HITRUST readinessor certification experience; Vanta or comparable compliance automation; Multi-entity or cross-border operationsSuccess in This Role Looks Like30 days: Full visibility into current infrastructure, MSP scope, and vendor dependencies; MSP transition plan drafted and open-decision evaluation underway (DLP, backup/recovery, vulnerability management, MDR)60 days: MSP handover underway; device managementand email security piloted on the fleet; recommendations on the open decisions taking shape with cost and rationale90 days: MSP relationship retired; device managementand email security deployed across the fleet with provisioning automation live; recommendations delivered on all four open decisionsLong-term: A secure, well-documented, fully in-house IT function that scales with the companyHow We HireMedMe is committed to a fair and equitable hiring process for all candidates. To ensure that each candidate's journey is consistent and the selection process is unbiased, the team at MedMe will not be responding to any personal messages regarding this role or other opportunities. This role will follow the below Interview Process:Initial screening conversation with our People and Culture teamIntro interview with the hiring managerTechnical interview with the teamAdditional cross-functional interview as required (depending on the role)References and offerHow We Use AIAt MedMe, we use AI to help us organize and manage applications, so our team can spend their time where it matters most.



Every CV is personally reviewed by a human being; AI helps us stay organized, not make decisions. We believe AI should make great people more effective, not replace the thinking and judgment that great hiring requires.Perks at MedMeComprehensive Health Benefits: Full coverage for dental, vision, physical, and mental health, plus a health spending account to cover additional wellness needsGroup RRSP: Secure your future with our Group Registered Retirement Savings Plan (RRSP)Professional Development: We support your growth with a yearly budget dedicated to learning opportunitiesWork-from-Home Stipend: A dedicated stipend to help set up and maintain your ideal home officeOffice Closure for Holidays: Enjoy 1 week of company-wide office closure during the holidaysCompany Retreats: Participate in exciting on-site team retreats for collaboration and bondingLocationThis is a hybrid position, based at our office located at the intersection of Adelaide and Spadina in Toronto, with in-person work required 2-3 days per week, aligned to operational needs. Occasional travel is expected for customer meetings, partner discussions, and industry events. Remote candidates may be considered on an exceptional basis based on experience.Equal Opportunity & AccessibilityMedMe is a proud equal opportunity workplace that is committed to equal employment opportunity regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We're looking for motivated and compassionate people who can execute from the ground up and support the work that MedMe believes in.MedMe is committed to developing an inclusive, barrier-free recruitment process and work environment. Should you require any accommodation, please inform us and we will work with you to meet your accessibility needs. For any accessibility-related assistance, requests for information in accessible alternative formats or to report any accessibility problems, please share in your application.Learn More About MedMeGlobe and Mail – Canada's Top Growing Companies (2025): MedMe was recognized on The Globe and Mail's list of Canada's Top Growing Companies, based on audited three-year revenue growth. LinkForbes 30 Under 30: Our co-founders were named to Forbes 30 Under 30 for their work building MedMe. Read moreC100 Growth Cohort (2025): MedMe is part of the 2025 C100 Growth Cohort, a selective community of Canada's top scaling companies. LinkCompensationThe salary range for this role is CAD $85,000.00 - $110,000.00 annually. Compensation is determined based on experience, skills, and alignment to the role's scope. We're happy to discuss the full details of our compensation package with candidates who progress through our interview process.

📌 It Manager (Toronto)
🏢 Fortinet
📍 Toronto