Vice President of Information Technology & Chief Information Security Officer (VP of IT / CISO)

Multiview Corporation

3d•CA$180,000 - CA$250,000•Remote

About The Position

Multiview is The Healthcare ERP Company, purpose-built for healthcare finance teams. Multiview delivers a powerful, scalable, and cost-effective ERP that unites financials, supply chain management, reporting, and analytics in a single platform. Backed by deep expertise in healthcare finance and recognized by KLAS Research as the #1 ERP for healthcare organizations under 300 beds, Multiview helps mid-sized healthcare organizations gain clarity, move faster, make better decisions, and stay focused on care. We are a values-led organization: People First. Client Obsessed. Stronger Together. Work Smart. Believe in Better. Reporting to the President and CEO, the Vice President of Information Technology & Chief Information Security Officer (VP of IT/CISO) is responsible for leading the organization's overall internal technology strategy, IT operations, cybersecurity programs, and regulatory compliance initiatives. This executive role serves as both the senior technology leader and the principal information security officer, ensuring that technology investments, security controls, and governance programs enable business growth while protecting critical company assets and client data. As a SaaS ERP provider supporting clients who maintain highly sensitive Protected Health Information (PHI), the VP of IT/CISO is accountable for developing and maintaining a best-in-class security and compliance program that meets the requirements of HIPAA, NIST, ISO 27001, SOC 2 and other applicable privacy and security regulations. The role will be responsible for the protection of internal corporate systems and cloud infrastructure. This is not a DevOps role, nor is there DevOps responsibility, however our compliance and security are owned by this position. The ideal candidate is a strategic executive capable of balancing innovation, scalability, risk management, compliance, and execution at a high level of operational excellence in a high-growth SaaS environment. A successful VP of IT/CISO will combine the strategic mindset of a technology executive with the rigour of a security leader. This role is not suited for someone who prefers delegation or high-level oversight alone. The VP of IT/CISO must be eager to roll up their sleeves, dive into day-to-day IT activities, and personally influence the employee and stakeholder experience. We are a proud award winning employer and intend to continue to improve the company as a place to work so that we can be worthy of the incredible talent we have. We are a remote-first company and welcome candidates across Canada. The expectations are that in-person meetings or in-person work will be less than 10% of the time. We welcome candidates with diverse backgrounds and experiences. If you bring strong IT leadership, a passion for security, and a willingness to work directly at both strategic and tactical levels, we want to hear from you.

Requirements

Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Engineering, or related field.
12+ years of progressive IT leadership experience.
7+ years leading enterprise cybersecurity programs.
Experience serving as a CISO, VP of IT, CIO, or equivalent
Experience within SaaS, cloud software, healthcare technology, ERP software, or highly regulated industries with specific data-handling considerations.
Strong understanding of applicable security, privacy and compliance standards, certifications and frameworks including: HIPAA, NIST Cybersecurity Framework, ISO 27001
Experience managing IT budgets and technology organizations.
Exceptional leadership, communication, and stakeholder management skills.

Nice To Haves

Professional certifications such as: CISSP, CISM, CRISC, CGEIT, CCSP, HCISPP
Experience leading organizations through significant growth and scaling initiatives.
Experience supporting rapidly growing SaaS businesses.
Strong understanding of data privacy and protection laws.
Experience and curiosity surrounding the advancements of AI in SaaS operations.

Responsibilities

Develop and execute the organization's IT and cybersecurity strategy aligned with corporate objectives.
Serve as a trusted advisor to leadership on technology investments, cybersecurity risk, compliance obligations, and operational scalability.
Establish IT and security roadmaps that enable growth, scalability and employee effectiveness.
Lead annual technology planning, budgeting, forecasting, and resource allocation processes.
Present regular updates to leadership regarding cybersecurity posture, risk landscape, compliance status, and strategic initiatives.
Build and lead a high-performing technology and security organization focused on accountability, innovation, and continuous improvement.
Support and participate as required on the Security & Privacy Committee.
Serve as the company's Chief Information Security Officer (CISO) with enterprise-wide responsibility for information security governance.
Implement and maintain an enterprise cybersecurity program based on recognized frameworks such as NIST CSF, ISO 27001, and CIS Controls.
Maintain appropriate security architecture, policies, procedures, and standards across all systems and environments.
Lead security monitoring, vulnerability management, penetration testing, threat intelligence, security operations, and incident response capabilities.
Ensure implementation of robust identity and access management, privileged access controls, multi-factor authentication, endpoint protection, data loss prevention, encryption, and zero-trust principles.
Oversee third-party security reviews and vendor risk management programs.
Direct forensic investigations, incident response activities, and breach notification processes when required.
Conduct regular cybersecurity risk assessments and maintain enterprise risk registers.
Maintain responsibility for protecting sensitive data and ensuring continued compliance with applicable standards including: HIPAA, Provincial, state and federal privacy regulations, SOC 2 Type II requirements, Client contractual security obligations.
Partner with Legal, Engineering, Product, and Client Success teams to ensure proper handling of PHI and Personally Identifiable Information (PII).
Oversee security controls protecting client data throughout its lifecycle including collection, transmission, storage, processing, backup, archival, and destruction.
Ensure implementation of appropriate administrative, physical, and technical safeguards for all regulated information.
Lead client security reviews, audits, and due diligence assessments.
Serve as executive sponsor for external audits, compliance certifications, and client risk assessments.
Serves as Privacy Officer
Lead all internal IT operations including corporate systems, service desk, networking, cloud infrastructure, endpoint management, and collaboration platforms.
Oversee disaster recovery, business continuity planning, and resilience testing programs.
Monitor and maintain appropriate service-level agreements (SLAs), operational metrics, and performance standards.
Drive modernization, automation strategies, and operational excellence programs, including support functions to improve security posture, operational efficiency, and service delivery.
Support organizational wide adoption of AI to increase velocity of stakeholder impact.
Ensure secure remote workforce capabilities and endpoint management practices.
Partner with Product and Engineering leadership to embed security throughout the software development lifecycle (SDLC).
Champion secure-by-design and privacy-by-design principles.
Oversee application security programs and cloud-native security controls across AWS and applicable multi-cloud environments with Engineering.
Ensure corporate applications maintain the highest standards of confidentiality, integrity, and availability.
Support the completion of RFP/RFQs from prospective and current clients and other stakeholders as required.
Maintain applicable enterprise technology governance structures and security oversight programs.
Develop risk management methodologies and reporting mechanisms.
Maintain cybersecurity insurance readiness and support annual policy renewals.
Create meaningful executive dashboards and KPIs related to: Security risk, Compliance posture, System availability, IT performance, Audit findings, Incident response metrics.
Lead business continuity and crisis management planning efforts.
Recruit, develop, and retain top-tier IT and cybersecurity talent.
Foster a culture of accountability, security awareness, and client-centric service.
Manage strategic technology vendors, managed service providers, cloud providers, and security partners.
Negotiate and manage technology contracts and licensing agreements.
Develop succession plans for critical technology and security leadership positions.