Vice President of Information Technology & Chief Information Security Officer (VP of IT / CISO)

About Multiview  

Multiview is The Healthcare ERP Company. Purpose-built for healthcare finance teams, Multiview delivers a powerful, scalable, and cost-effective ERP that unites financials, supply chain management, reporting, and analytics in a single platform. Backed by deep expertise in healthcare finance and recognized by KLAS Research as the #1 ERP for healthcare organizations under 300 beds, Multiview helps mid-sized healthcare organizations gain clarity, move faster, make better decisions, and stay focused on care. 

We are a values-led organization:

People First. Client Obsessed. Stronger Together. Work Smart. Believe in Better.  

Position Summary

Reporting to the President and CEO, the Vice President of Information Technology & Chief Information Security Officer (VP of IT/CISO) is responsible for leading the organization's overall internal technology strategy, IT operations, cybersecurity programs, and regulatory compliance initiatives. This executive role serves as both the senior technology leader and the principal information security officer, ensuring that technology investments, security controls, and governance programs enable business growth while protecting critical company assets and client data.

As a SaaS ERP provider supporting clients who maintain highly sensitive Protected Health Information (PHI), the VP of IT/CISO is accountable for developing and maintaining a best-in-class security and compliance program that meets the requirements of HIPAA, NIST, ISO 27001, SOC 2 and other applicable privacy and security regulations. The role will be responsible for the protection of internal corporate systems and cloud infrastructure. This is not a DevOps role, nor is there DevOps responsibility, however our compliance and security are owned by this position. 

The ideal candidate is a strategic executive capable of balancing innovation, scalability, risk management, compliance, and execution at a high level of operational excellence in a high-growth SaaS environment. A successful VP of IT/CISO will combine the strategic mindset of a technology executive with the rigour of a security leader.

This role is not suited for someone who prefers delegation or high-level oversight alone. The VP of IT/CISO must be eager to roll up their sleeves, dive into day-to-day IT activities, and personally influence the employee and stakeholder experience. 

We are a proud award winning employer and intend to continue to improve the company as a place to work so that we can be worthy of the incredible talent we have. 

We are a remote-first company and welcome candidates across Canada. The expectations are that in-person meetings or in-person work will be less than 10% of the time.

We welcome candidates with diverse backgrounds and experiences.  

If you bring strong IT leadership, a passion for security, and a willingness to work directly at both strategic and tactical levels, we want to hear from you. 

The salary for this role is $180,000.00 to 250,000.00 CAD plus variable. The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills, experience, and geographic location.

Key Responsibilities

Executive Leadership & Strategy

• Develop and execute the organization's IT and cybersecurity strategy aligned with corporate objectives.


• Serve as a trusted advisor to leadership on technology investments, cybersecurity risk, compliance obligations, and operational scalability.


• Establish IT and security roadmaps that enable growth, scalability and employee effectiveness.


• Lead annual technology planning, budgeting, forecasting, and resource allocation processes.


• Present regular updates to leadership regarding cybersecurity posture, risk landscape, compliance status, and strategic initiatives.


• Build and lead a high-performing technology and security organization focused on accountability, innovation, and continuous improvement.


• Support and participate as required on the Security & Privacy Committee.

Cybersecurity & Information Security Leadership

• Serve as the company's Chief Information Security Officer (CISO) with enterprise-wide responsibility for information security governance.


• Implement and maintain an enterprise cybersecurity program based on recognized frameworks such as NIST CSF, ISO 27001, and CIS Controls.


• Maintain appropriate security architecture, policies, procedures, and standards across all systems and environments.


• Lead security monitoring, vulnerability management, penetration testing, threat intelligence, security operations, and incident response capabilities.


• Ensure implementation of robust identity and access management, privileged access controls, multi-factor authentication, endpoint protection, data loss prevention, encryption, and zero-trust principles.


• Oversee third-party security reviews and vendor risk management programs.


• Direct forensic investigations, incident response activities, and breach notification processes when required.


• Conduct regular cybersecurity risk assessments and maintain enterprise risk registers.

Data Privacy & Compliance

• Maintain responsibility for protecting sensitive data and ensuring continued compliance with applicable standards including:
  
  
  
  • HIPAA
  
  
  • Provincial, state and federal privacy regulations
  
  
  • SOC 2 Type II requirements
  
  
  • Client contractual security obligations
  
  


• Partner with Legal, Engineering, Product, and Client Success teams to ensure proper handling of PHI and Personally Identifiable Information (PII).


• Oversee security controls protecting client data throughout its lifecycle including collection, transmission, storage, processing, backup, archival, and destruction.


• Ensure implementation of appropriate administrative, physical, and technical safeguards for all regulated information.


• Lead client security reviews, audits, and due diligence assessments.


• Serve as executive sponsor for external audits, compliance certifications, and client risk assessments.


• Serves as Privacy Officer

IT Infrastructure & Operations

• Lead all internal IT operations including corporate systems, service desk, networking, cloud infrastructure, endpoint management, and collaboration platforms.


• Oversee disaster recovery, business continuity planning, and resilience testing programs.


• Monitor and maintain appropriate service-level agreements (SLAs), operational metrics, and performance standards.


• Drive modernization, automation strategies, and operational excellence programs, including support functions to improve security posture, operational efficiency, and service delivery.


• Support organizational wide adoption of AI to increase velocity of stakeholder impact.


• Ensure secure remote workforce capabilities and endpoint management practices.

SaaS Platform Security

• Partner with Product and Engineering leadership to embed security throughout the software development lifecycle (SDLC).


• Champion secure-by-design and privacy-by-design principles.


• Oversee application security programs and cloud-native security controls across AWS and applicable multi-cloud environments with Engineering.


• Ensure corporate applications maintain the highest standards of confidentiality, integrity, and availability.


• Support the completion of RFP/RFQs from prospective and current clients and other stakeholders as required.

Risk Management & Governance

• Maintain applicable enterprise technology governance structures and security oversight programs.


• Develop risk management methodologies and reporting mechanisms.


• Maintain cybersecurity insurance readiness and support annual policy renewals.


• Create meaningful executive dashboards and KPIs related to:
  
  
  
  • Security risk
  
  
  • Compliance posture
  
  
  • System availability
  
  
  • IT performance
  
  
  • Audit findings
  
  
  • Incident response metrics
  
  


• Lead business continuity and crisis management planning efforts.

Team Development & Vendor Management

• Recruit, develop, and retain top-tier IT and cybersecurity talent.


• Foster a culture of accountability, security awareness, and client-centric service.


• Manage strategic technology vendors, managed service providers, cloud providers, and security partners.


• Negotiate and manage technology contracts and licensing agreements.


• Develop succession plans for critical technology and security leadership positions.

Required Qualifications

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Engineering, or related field.


• 12+ years of progressive IT leadership experience.


• 7+ years leading enterprise cybersecurity programs.


• Experience serving as a CISO, VP of IT, CIO, or equivalent


• Experience within SaaS, cloud software, healthcare technology, ERP software, or highly regulated industries with specific data-handling considerations.


• Strong understanding of applicable security, privacy and compliance standards, certifications and frameworks including:
  
  
  
  • HIPAA
  
  
  • NIST Cybersecurity Framework
  
  
  • ISO 27001
  
  


• Experience managing IT budgets and technology organizations.


• Exceptional leadership, communication, and stakeholder management skills.

Preferred Qualifications

• Professional certifications such as: CISSP, CISM, CRISC, CGEIT, CCSP, HCISPP


• Experience leading organizations through significant growth and scaling initiatives.

• Experience supporting rapidly growing SaaS businesses.


• Strong understanding of data privacy and protection laws.


• Experience and curiosity surrounding the advancements of AI in SaaS operations.

APPLICATION INSTRUCTIONS

Please submit your resume, and a cover letter describing, why you are a unique fit for this position by applying to this posting. We thank all applicants for expressing their interest in Multiview; however, only those candidates selected for an interview will be contacted. Multiview is committed to providing an inclusive and accessible candidate experience. If you require accommodation during the recruitment and selection process, please let us know. We will work with you to meet your needs. 

ACCESSIBILITY & DIVERSITY:  

Multiview promotes a diverse, inclusive, and accessible workplace. By embracing diversity, we are building a more effective organization that empowers our employees to be the best that they can be. We know that diversity of thought makes for the best problem-solving and creative thinking, which is why we are dedicated to adding new perspectives to the team and encouraging everyone to apply. 

Multiview is an Equal Opportunity Employer, and we are committed to creating a barrier-free working environment for all. In accordance with the Accessibility for Ontarians with Disabilities Act (AODA) and Ontario Human Rights Code, Multiview will provide accommodation throughout the recruitment, selection and/or assessment process for applicants with disabilities, upon request.