Privacy and Information Security Specialist

Virtual Hallway | Remote within Canada | Part-time, permanent — 16 to 24 hours per week
Reports to: Chief Privacy and Information Security Officer.

About the role

Virtual Hallway is a Canadian digital health company serving more than 12,000 clinicians through peer teleconsultation, accredited medical education, and Asklepius, our AI-powered clinical reference tool. We handle personal health information across multiple provinces, so privacy and security are central to clinician trust.

You will run our privacy and information security program day to day and keep our IT environment running, reporting to the Chief Privacy and Information Security Officer, who holds the designated Privacy Officer role. The role is hands-on, with significant autonomy and room to grow into a more senior role, including Chief Privacy and Information Security Officer in time. Work remotely from anywhere in Canada; our Halifax office is available if you are local.

Responsibilities

• Run and improve the privacy program — policies and procedures, records of processing, consent and notice, retention, de-identification — under PIPEDA and the provincial health privacy and e-health statutes.
• Advance our ISO/IEC 27001:2022 program to certification readiness, and administer Carbide, our compliance platform, including the risk register, vendor risk, and the annual privacy impact and threat risk assessment cycle.
• Administer our mobile device management platform: device baselines, encryption, patch enforcement, endpoint protection, and BYOD controls.
• Provide day-to-day IT support to staff: laptop and software issues, account provisioning, onboarding and offboarding.
• Lead incident response and breach determinations, including notification obligations, and be primary responder on security questionnaires from health authorities and enterprise customers.
• Advise engineering on privacy-by-design, deliver privacy and security training, and contribute to AI governance for our products.

Requirements

Required

• Three or more years in a dedicated privacy, information security, or governance, risk and compliance role, with demonstrated program ownership.
• At least one relevant credential: CIPM, CIPP/C, CISA, ISO 27001 Lead Implementer or Lead Auditor, CIPT, CISM, or CISSP.
• Practical experience with a recognized security framework: ISO/IEC 27001, SOC 2, NIST CSF, NIST 800-53, or a sector equivalent.
• Hands-on experience administering endpoint or device management tooling (Mosyle, Jamf, Intune, Kandji), and willingness to own Mosyle Fuse.
• Experience leading incident response, with documentation able to withstand later regulatory or audit review.

Preferred

• Experience in Canadian healthcare or digital health. Alternatively, substantial experience in another highly regulated sector — defence, financial services, insurance, critical infrastructure, or government — with our support to build the health privacy side.
• IT certifications such as CompTIA A+, Security+, or Apple Certified IT Professional, or equivalents.
• Based in or near Halifax and open to occasional or hybrid time in our office. This is a preference only; the role can be done entirely remotely from anywhere in Canada for the right candidate.

Hiring process:

• Initial 30-minute conversation with the Chief Privacy and Information Security Officer.
• A second, more technical discussion covering your hands-on privacy, security, and IT experience.
• Reference checks and a background check, including a criminal record check, before any offer is finalized.

Applicant privacy:

• Application materials are used only to assess your candidacy for this role, are accessible only to those involved in hiring, and are retained for a limited period before secure deletion. We do not use applicant information for any other purpose or share it outside Virtual Hallway without your consent.
• Background and reference checks are conducted only with your consent at the offer stage.
• Accommodation will be provided at any stage of the hiring process on request.

Benefits

• $50 to $60 CAD per hour, by experience and depth of expertise, at 16 to 24 hours per week.
• Fully remote within Canada, with flexible scheduling. Our Halifax office is available if you are local.
• Ongoing role with significant autonomy and a defined path to a more senior position. Open to either a part-time employment or an independent contractor arrangement, depending on situation.