Global Information Security Director: Strategy & Trust

Carrot; United States; Remote; USD 188.000 - 245.000; Vollzeit

Benefits dieser Stelle

Competitive compensation package

Equity & benefits

Flexible time off

Zusammenfassung

Carrot is seeking a Director of Information Security to lead the security program for a global health platform. You will set the security strategy, own both corporate and product security, and partner with executives, auditors, and customers to demonstrate a strong security posture.

You will guide risk assessments, manage compliance (SOC 2 II, HITRUST, PCI DSS, HIPAA), and scale a security team while working with Legal and Privacy on global data protection requirements.

Qualifikationen

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 10+ years of technology experience, including 5+ years in information security and at least 3 years leading security teams.
• Security certification such as CISSP or CISM.
• Experience leading security at a late-stage startup, scale-up, or public company.
• Working depth in healthcare data protection and privacy frameworks (HIPAA, GDPR, CCPA/CPRA).
• Experience overseeing enterprise audits such as SOC 2 Type II, HITRUST, PCI DSS, ISO 27001.

Aufgaben

• Lead Carrot's security strategy and roadmap, reporting progress to executives.
• Own the full security program across corporate security and product security.
• Partner with Engineering to bake security into system design, beyond mere compliance.
• Conduct internal risk assessments and translate results into prioritized safeguards.
• Own the compliance portfolio (SOC 2 II, HITRUST, PCI DSS, HIPAA) and prepare for ISO 27001.
• Direct incident response readiness with playbooks and tabletop exercises.
• Represent security posture to employers, health plans, and health systems.
• Collaborate with Legal and Privacy on global data protection requirements (HIPAA, GDPR, CCPA).
• Build, coach, and grow the security team; manage budget and vendors.

Kenntnisse

Security leadership

Executive communication

Incident response

Risk management

Compliance programs

Cloud security

GRC framework

Ausbildung

Bachelor's degree in CS/IT or related field

Tools

AWS

Azure

Drata

Jobbeschreibung

Carrot is seeking a Director of Information Security to lead the security program for a global health platform. You will set the security strategy, own both corporate and product security, and partner with executives, auditors, and customers to demonstrate a strong security posture.

You will guide risk assessments, manage compliance (SOC 2 II, HITRUST, PCI DSS, HIPAA), and scale a security team while working with Legal and Privacy on global data protection requirements.