Director of Information Security — Strategy, Risk & Trust

Jobicy; United States; On-site; USD 188,000 - 245,000; Full time

Benefits offered by this job

Flexible Time Off

Parental leave

Equity

Job summary

Carrot is seeking a Director, Information Security to lead a global security program protecting highly sensitive fertility and family data. You will set strategy, own corporate and product security, and serve as the trusted voice with executives, auditors, and enterprise customers.

Day to day, you will balance direction with hands-on work: prioritizing risk with Engineering, guiding audits, coaching a team, and engaging with customers where security influences buying decisions.

Qualifications

• Bachelor's degree in CS/IT or related field.
• 10+ years in technology with 5+ in information security.
• 3+ years leading security teams.
• Security certification such as CISSP or CISM.
• Experience leading security at late-stage startups, scale-ups, or public company.
• Working depth in healthcare data protection (HIPAA, GDPR, CCPA/CPRA).

Responsibilities

• Lead Carrot’s security strategy and roadmap, using a maturity model to drive investments.
• Own the full security program across corporate security and product security.
• Partner with Engineering to bake security into designs, ships, and operations.
• Lead internal risk assessments and translate results into safeguards.
• Own compliance portfolio (SOC 2 Type II, HITRUST, PCI DSS, HIPAA) and prep for ISO 27001.
• Direct incident response readiness, including playbooks and tabletop exercises.
• Represent security to employers, health plans, and health systems in reviews.
• Work with Legal and Privacy on global data protection requirements.
• Build, coach, and grow the security team and budget.

Skills

Security strategy

Executive communication

Incident response

Regulatory compliance

Vendor risk management

Education

Bachelor's degree in CS/IT or related field

CISSP or CISM certification

Tools

NIST CSF

ISO 27001

Drata

Job description

Carrot is seeking a Director, Information Security to lead a global security program protecting highly sensitive fertility and family data. You will set strategy, own corporate and product security, and serve as the trusted voice with executives, auditors, and enterprise customers.

Day to day, you will balance direction with hands-on work: prioritizing risk with Engineering, guiding audits, coaching a team, and engaging with customers where security influences buying decisions.