Director of Information Security & Trust

Carrot; United States; Remote; USD 180,000 - 260,000; Full time

Job summary

Carrot is seeking a seasoned security leader to set the company’s security strategy, lead GRC, incident response, and product security. You will partner with Engineering to embed security into systems and ensure regulatory compliance across a fast-growing platform serving millions of members.

The role emphasizes protecting member data, building trust with global customers, and shaping security leadership at a mission-driven organization.

Qualifications

• 10+ years in tech with 5+ in security and 3+ leading teams.
• Deep expertise in HIPAA, GDPR, SOC 2, HITRUST, and cloud security.

Responsibilities

• Set security strategy and lead GRC, incident response, and product security.
• Partner with Engineering to embed security into systems and compliance.

Skills

Security leadership

Cloud security

GRC

Incident response

HIPAA compliance

GDPR compliance

SOC 2

HITRUST

Team leadership

Job description

Carrot is seeking a seasoned security leader to set the company’s security strategy, lead GRC, incident response, and product security. You will partner with Engineering to embed security into systems and ensure regulatory compliance across a fast-growing platform serving millions of members.

The role emphasizes protecting member data, building trust with global customers, and shaping security leadership at a mission-driven organization.