IT and Privacy Lead

Virtual Hallway | Remote within Canada | Part-time, permanent — 16 to 24 hours per week

Reports to: Chief Privacy and Information Officer

Rate: $50 – $60 CAD per hour

ABOUT THE ROLE

Virtual Hallway is a Canadian digital health company serving more than 12,000 clinicians through peer teleconsultation, accredited medical education, and Asklepius, our AI-powered clinical reference tool. We handle personal health information across multiple provinces, so privacy and security are central to clinician trust.

You will run our privacy and information security program day to day and keep our IT environment running, reporting to the Chief Privacy and Information Officer, who holds the designated Privacy Officer role. The role is hands-on, with significant autonomy and room to grow into a more senior role, including Chief Privacy and Information Officer in time. Work remotely from anywhere in Canada; our Halifax office is available if you are local.

KEY RESPONSIBILITIES

• Run and improve the privacy program — policies and procedures, records of processing, consent and notice, retention, de-identification — under PIPEDA and the provincial health privacy and e-health statutes.
• Advance our ISO/IEC 27001:2022 program to certification readiness, and administer Carbide, our compliance platform, including the risk register, vendor risk, and the annual privacy impact and threat risk assessment cycle.
• Administer our mobile device management platform: device baselines, encryption, patch enforcement, endpoint protection, and BYOD controls.
• Provide day-to-day IT support to staff: laptop and software issues, account provisioning, onboarding and offboarding.
• Lead incident response and breach determinations, including notification obligations, and be primary responder on security questionnaires from health authorities and enterprise customers.
• Advise engineering on privacy-by-design, deliver privacy and security training, and contribute to AI governance for our products.

QUALIFICATIONS

Required

• Three or more years in a dedicated privacy, information security, or governance, risk and compliance role, with demonstrated program ownership.
• At least one relevant credential: CIPM, CIPP/C, CISA, ISO 27001 Lead Implementer or Lead Auditor, CIPT, CISM, or CISSP.
• Practical experience with a recognized security framework: ISO/IEC 27001, SOC 2, NIST CSF, NIST 800-53, or a sector equivalent.
• Hands-on experience administering endpoint or device management tooling (Mosyle, Jamf, Intune, Kandji), and willingness to own Mosyle Fuse.
• Experience leading incident response, with documentation able to withstand later regulatory or audit review.

Preferred

• Experience in Canadian healthcare or digital health. Alternatively, substantial experience in another highly regulated sector — defence, financial services, insurance, critical infrastructure, or government — with our support to build the health privacy side.
• IT certifications such as CompTIA A+, Security+, or Apple Certified IT Professional, or equivalents.
• Based in or near Halifax and open to occasional or hybrid time in our office. This is a preference only; the role can be done entirely remotely from anywhere in Canada for the right candidate.

COMPENSATION AND BENEFITS

• $50 to $60 CAD per hour, by experience and depth of expertise, at 16 to 24 hours per week.
• Fully remote within Canada, with flexible scheduling. Our Halifax office is available if you are local.
• Ongoing role with significant autonomy and a defined path to a more senior position. Open to either a part-time employment or an independent contractor arrangement, depending on situation

HIRING PROCESS

• Initial 30-minute conversation with the Chief Privacy and Information Officer.
• A second, more technical discussion covering your hands-on privacy, security, and IT experience.
• Reference checks and a background check, including a criminal record check, before any offer is finalized.

APPLICANT PRIVACY

Application materials are used only to assess your candidacy for this role, are accessible only to those involved in hiring, and are retained for a limited period before secure deletion. We do not use applicant information for any other purpose or share it outside Virtual Hallway without your consent. Background and reference checks are conducted only with your consent at the offer stage.

HOW TO APPLY

Virtual Hallway welcomes all qualified applicants and will provide accommodation at any stage of the hiring process on request.