Program Manager – Security Operations & Compliance

About the role

Anovia seeks a hands‑on Program Manager to lead security operations and compliance initiatives. You will maintain ISO/IEC 27001, support SOC 2 and HIPAA programs, and drive technical projects such as new security tools or NOC/SOC capabilities.

Key responsibilities

• Maintain and develop Anovia’s ISO/IEC 27001 ISMS, including policies, controls, evidence and continuous improvement.
• Coordinate internal and external audit activities, prepare evidence, schedule meetings and track remediation actions.
• Support identity and access management, security tooling (Microsoft 365, Defender, Intune, Entra ID), vulnerability management and third‑party assessments.
• Lead technical and operational initiatives from scope definition through implementation, managing stakeholders, risks and issues.

Required profile

• 4+ years of experience in information security, IT compliance or GRC.
• Hands‑on experience with ISO/IEC 27001, SOC 2 or similar frameworks and participation in audit or certification processes.
• Proven ability to structure ambiguous initiatives, define scope, coordinate stakeholders and drive completion.
• Bachelor’s degree in Information Security, Computer Science, IT or equivalent practical experience.

Required skills

• ISO/IEC 27001
• SOC 2
• HIPAA
• Microsoft 365 security suite (Defender, Intune, Entra ID)
• GRC processes and tools

What we offer

• Comprehensive health insurance and wellness programs
• Generous leave policies including holiday, maternity, paternity and birthday leave
• Remote work opportunities and focus on work‑life balance
• Growth and learning opportunities with company incentive programs
• Immigration support for eligible employees moving to Canada