Want to know if this job is worth applying to?
Brampton, Ontario, Canada
Onsite
TELUS Health is empowering every person to live their healthiest life. Guided by our vision, we are leveraging the power of our leading edge technology and focusing on the uniqueness of each individual to create the future of health. As a global-leading health and well-being provider – encompassing physical, mental and financial health – TELUS Health is improving health outcomes for consumers, patients, healthcare professionals, employers and employees.
Join Our Team and What We'll Accomplish Together
Your week will move between big-picture strategy and hands-on execution. Here's what a typical engagement looks like:
NIST 800-53 Compliance Leadership
You'll own the NIST 800-53 Moderate program from initial gap assessment through remediation and into continuous monitoring. You'll coordinate cross-functional teams—Engineering, DevSecOps, Security, and Compliance—to implement NIST 800-53 controls. You'll oversee the creation and maintenance of System Security Plans (SSPs), Plans of Actions & Milestones (POA&Ms), and supporting documentation. As the primary liaison with Third Party Assessment Organizations (3PAOs) and federal sponsor agencies, you'll manage remediation efforts based on audit findings and establish continuous monitoring (ConMon) practices that stick.
Multi-Framework Certification Management
You'll lead project planning, execution, and reporting across multiple cybersecurity frameworks—with NIST 800-53 Moderate as the primary focus. You'll develop and maintain schedules, milestones, deliverables, and dependencies that keep the team aligned. You'll coordinate with internal teams to ensure controls are documented, tested, and evidenced per relevant frameworks. You'll manage documentation creation (Security Assessment Reports, incident response plans, vulnerability management records) and oversee continuous monitoring programs and periodic compliance reviews.
Technical Architecture & Implementation
You'll partner closely with Engineering to ensure technical architecture and security control implementations are aligned with NIST 800-53 baselines. You'll lead the design and validation of identity management, data flows, and API integrations. You'll champion vulnerability management and incident response frameworks, ensuring alignment of data protection mechanisms across the technology stack.
Stakeholder Management & Communication
You'll communicate progress, risks, and dependencies to executive leadership and client stakeholders regularly. You'll prepare status reports, dashboards, and presentations for senior leadership. You'll facilitate executive steering committees and governance forums. You'll liaise with external auditors, cloud service providers, and regulatory bodies. And you'll provide technical mentorship and leadership for compliance best practices across the organization.
Must-Haves
10+ years in IT project management or solution architecture for enterprise or government platforms
Direct hands-on experience managing cybersecurity compliance — OR equivalent regulatory/assurance programs (DoD SRG, ISO 27001, SOC 2, GxP). You know NIST 800-53 documentation, continuous monitoring, 3PAO engagement, SSP and POA&M development inside and out.
PMP or equivalent project management certification
Deep working knowledge of cloud environments (AWS, Azure, GCP) including security control implementation, cloud network/security architecture, identity & access management, encryption, and logging
Strong knowledge of NIST 800-53 controls and continuous monitoring operations
Experience working with Third Party Assessment Organizations, federal compliance bodies, and cloud providers
Excellent communication skills — ability to simplify complex technical and compliance concepts for both technical teams and executive stakeholders
Strategic and hands-on leadership — you're comfortable both setting direction and rolling up your sleeves
Collaborative and adaptable — you thrive in cross-functional environments and can navigate competing priorities
Nice-to-Haves
Master's degree in Computer Science, Information Systems, or Engineering
Cloud certification such as Azure Solutions Architect Expert
CISSP, CISM, CISA, or NIST CSF certification
Experience with CSA STAR, the Cloud Security Alliance's CCM, or other related trust & assurance cloud frameworks
Familiarity with security/privacy/regulatory requirements in pensions, benefits administration, or financial services (PIPEDA, HIPAA, GLBA, state data breach laws, US federal or state agency standards)
Background in pension administration, benefits management, or financial services technology
Experience with GRC tools and conformity reporting
Salary Range: $120,000 - $160,000
Actual total compensation will be determined based on factors such as knowledge, skills, performance and experience. We encourage all qualified candidates to apply, even if the posted salary range doesn't match your expectations. We're open to discussing competitive compensation packages tailored to your experience level and expertise.
TELUS Health offers rewarding benefits, which may vary per job function, such as:
Comprehensive total rewards package highlighting competitive salary and bonus structures, minimum 3 weeks of vacation, and flexible benefits plan to meet the needs of you and your family
Flexibility to work in-office, virtually or a combination of both
Generous company matched pension
Opportunity to give back to communities in which we work, live and serve
Career growth and learning & development opportunities to develop your skills
And much more…
Job Type: This is for a current vacancy.
Purpose-Driven Impact — Work with a team that's genuinely focused on innovation in health and financial well-being. Your work shapes secure benefits administration for millions of North Americans.
Strategic Career Opportunity — Lead a mission-critical compliance program that positions TELUS Health in new markets. This is the kind of transformational work that accelerates your career trajectory.
Collaborate with Experts — Partner with industry-leading Engineering, Security, and Compliance teams who are invested in doing this right.
Competitive Total Rewards — Competitive compensation, comprehensive benefits, and clear career growth opportunities for leaders who drive results.
Mission-Aligned Work — TELUS Health's commitment to compassion and innovation means you're building solutions that genuinely improve people's lives.
A bit about us
We’re a people-focused, customer-first, purpose-driven team who works together every day to innovate and do good. We improve lives through our technology solutions and foster a culture of innovation that empowers team members to solve complex problems and create remarkable human outcomes in a digital world.
TELUS is proud to foster an inclusive culture that embraces diversity. We are committed to fair employment practices and all qualified applicants will receive consideration for employment. We offer accommodation for applicants with disabilities, as required, during the recruitment process.
Disclaimer: In accordance with the TELUS Health Solutions Data Center Security Policy, as a condition of employment, all team members whose job functions require they work at a Data Center and/or have access to detailed knowledge of technology related to client service delivery, are subject to a Personnel Security Screening conducted through the Government of Canada.
Note for Quebec candidates: if knowledge of English is required for this position, it is because the team member will be asked, on a regular basis, to interact in English with external or internal parties or to use English applications or software as part of their tasks.
By applying to this role, you understand and agree that your information will be shared with the TELUS Group of Companies’ Talent Acquisition team(s) and/or any leader(s) who will be part of the selection process.