IT & Compliance Manager

About OneFeather

OneFeather is an Indigenous-owned technology and consultation company deeply committed to breaking down barriers faced by the Indigenous communities in Canada. Through advanced digital solutions, we aim to revolutionize access to benefits and services for Indigenous people.

OneFeather is the leading end-to-end election, referendum, and ratification vote management service provider to First Nations throughout Canada. We are building and deploying new innovative technologies designed specifically for First Nations, including registrar management, community engagement, electronic voting, and other exciting fintech solutions – including for the first time an online Status Card renewal application. We presently work with over 200 First Nations across the country.

At the core of our operations is the Identity Provider (IdP) business model – a cloud-based service that empowers businesses to manage and secure digital identities. This burgeoning sector offers incredible growth potential, spurred by the accelerating digital transformation, rising cybersecurity threats, and stricter data protection regulations.

The Opportunity

OneFeather is seeking an experienced IT and Compliance Manager to join our team. In this role, you will oversee all aspects of our IT infrastructure including our cloud infrastructure, ensuring its security, reliability, and compliance with relevant regulations. You will manage IT support services, cybersecurity measures, and data governance practices to safeguard our company's assets and information. Additionally, you will lead compliance efforts, staying up-to-date with industry standards and implementing policies and controls to meet regulatory requirements.

Position Details

- Department: Technical Team
- Job Type: Full-Time
- Work Location: Remote
- Reports to: CTO

Compensation: $100,000 – 110,000 annually

We offer competitive wages and an employment package commensurate with experience.

Responsibilities: IT Management, Security & Compliance, Vendor Management, Policy Development & Documentation

IT Management:

- Oversee the setup, maintenance, and optimization of the company's IT. infrastructure, including hardware, software, networks, and cloud infrastructure.
- Manage IT support services to ensure timely resolution of technical issues for employees.
- Implement and maintain cybersecurity measures, such as firewalls, antivirus software, and access controls.
- Conduct regular backups and disaster recovery planning to safeguard company data.
- Implement access controls and encryption mechanisms to protect sensitive data from unauthorized access or disclosure.

Security & Compliance:

- Stay abreast of relevant laws, regulations, and industry standards related to data protection, privacy, and IT security.
- Conduct risk assessments to identify potential compliance gaps and develop mitigation strategies.
- Coordinate audits and assessments by external regulators or certification bodies.
- Provide guidance and training to employees on compliance-related matters.
- Provide training and awareness programs to educate employees about IT security best practices, compliance requirements, and potential risks.

Vendor Management:

- Manage relationships with third-party vendors and service providers to ensure compliance with contractual agreements and security standards.
- Evaluate vendors' security practices and perform due diligence assessments before engaging their services.
- Monitor vendor performance and address any security or compliance issues that arise.
- Plan, develop and implement the IT budget and obtain competitive prices from suppliers to ensure cost-effectiveness.

Policy Development and Documentation:

- Develop and maintain IT security policies, standards, and procedures to guide the organization's IT activities.
- Document IT systems, processes, and controls to facilitate compliance audits and assessments.
- Develop and implement policies, procedures, and controls to ensure compliance with applicable regulations, such as SOC 2 and ISO 27001.

Requirements

- Bachelor's degree in Computer Science, Information Technology, or equivalent experience.
- 4 years of IT management experience.
- Proficiency in managing Office 365 and Google Cloud Platform.
- Experience with Kubernetes and containerization is preferred.
- Strong grasp of cybersecurity principles.
- Hands-on experience with DevSecOps practices.
- Strong understanding of data privacy and security regulations (e.g. SOC 2, GDPR).
- Ability to implement and maintain compliance frameworks.
- Strong problem-solving skills.
- Excellent communication abilities.
- Ability to adapt to a fast-paced environment.
- Strong interpersonal skills and collaboration mindset.

Deadline for Applications: Posting will remain active until the position is filled.

Thank you for considering a career at OneFeather. Come be a part of our journey toward creating a more equitable future for all.

Job Type: Full-time

Pay: $100,000.00-$110,000.00 per year