Global InfoSec Director - Healthcare Data Security

Carrot Fertility; United States; Remote; USD 188,000 - 245,000; Full time

Benefits offered by this job

Flexible Time Off

Parental Leave

Equity

Job summary

Carrot Fertility in the United States seeks a Director, Information Security to lead a global security program protecting highly personal health data and securing platforms used by members, employers, and providers.

You will set strategy, oversee corporate and product security, drive audits and certifications, coach a growing team, and partner with executives to defend a privacy‑critical health platform at scale.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Security certification such as CISSP or CISM.
• 10+ years in technology, 5+ years in information security, and 3+ years leading security teams.

Responsibilities

• Lead Carrot's security strategy and multi‑year roadmap to prioritize investments.
• Own corporate security (GRC, incident management, security awareness, vendor risk) and product security (app, cloud, secure SDLC).
• Partner with Engineering to bake security into design, delivery, and operations.
• Direct incident response readiness, including playbooks and tabletop exercises.
• Represent security to employers, health plans, and health systems in security reviews and conversations.
• Ensure compliance with HIPAA, GDPR, CCPA/CPRA and future frameworks like ISO 27001.
• Build and grow the security team and manage budgets and vendor relationships.

Skills

Security strategy

GRC

Incident response

Executive communication

Vendor risk management

Application security

Cloud security

Risk management

Security awareness

Security leadership

Education

Bachelor's degree in Computer Science or related field

CISSP or CISM certification

Job description

Carrot Fertility in the United States seeks a Director, Information Security to lead a global security program protecting highly personal health data and securing platforms used by members, employers, and providers.

You will set strategy, oversee corporate and product security, drive audits and certifications, coach a growing team, and partner with executives to defend a privacy‑critical health platform at scale.