Director, Information Security (Fully Remote)

Carrot; United States; Remote; USD 180,000 - 260,000; Full time

Job summary

Carrot is seeking a seasoned security leader to set the company’s security strategy, lead GRC, incident response, and product security. You will partner with Engineering to embed security into systems and ensure regulatory compliance across a fast-growing platform serving millions of members.

The role emphasizes protecting member data, building trust with global customers, and shaping security leadership at a mission-driven organization.

Qualifications

• 10+ years in tech with 5+ in security and 3+ leading teams.
• Deep expertise in HIPAA, GDPR, SOC 2, HITRUST, and cloud security.

Responsibilities

• Set security strategy and lead GRC, incident response, and product security.
• Partner with Engineering to embed security into systems and compliance.

Skills

Security leadership

Cloud security

GRC

Incident response

HIPAA compliance

GDPR compliance

SOC 2

HITRUST

Team leadership

Job description

• Set security strategy and lead GRC, incident response, and product security.
• Partner with Engineering to embed security into systems and compliance.

About You:

• 10+ years in tech with 5+ in security and 3+ leading teams.
• Deep expertise in HIPAA, GDPR, SOC 2, HITRUST, and cloud security.

Why This Role Matters:

• Protect sensitive member data and build trust with global customers.
• Shape security leadership at a mission-driven, fast-growing company.

Carrot

Carrot is a global fertility and family care platform providing intelligent clinical guidance and comprehensive support. Trusted by more than 1,000 employers and health plans, it serves millions of members across 195 countries and is celebrated for its innovative, inclusive, and mission-driven culture.