Director, Information Security
Carrot
WorldwideFully remoteFull TimeDirectorInformation Technology
USD 188,000–245,000 a yearPosted 1 hour ago1h agoApply link checked 54 minutes ago
Why we think you can apply
- Hiring model
- Open worldwide · the employer states no country restriction
- Work from
- Anywhere, the UAE included
Posted 1 hour ago · apply link checked 54 minutes ago
About the role
Responsibilities
- Lead the security strategy and roadmap, reporting progress to executive leadership
- Own corporate security (GRC, incident management, security awareness, third-party risk) and product security (application, cloud, infrastructure, secure SDLC)
- Partner with Engineering to build security into design, shipping and operations
- Lead internal risk assessments and turn results into prioritized safeguards
- Own the compliance portfolio: SOC 2 Type II, HITRUST, PCI DSS, HIPAA, and prepare for ISO 27001
- Direct incident response readiness, playbooks and tabletop exercises
- Represent security posture to employers, health plans and health systems
- Work with Legal and Privacy on HIPAA, GDPR and CCPA/CPRA requirements
- Build, coach and grow the security team
- Manage the security budget, tooling and vendors
Requirements
- Bachelor's degree in Computer Science, IT or related field, or equivalent experience
- 10+ years in technology, including 5+ years in information security and 3+ years leading security teams
- CISSP or CISM certification
- Experience leading security at a late-stage startup, scale-up or public company
- Working depth in HIPAA, GDPR and CCPA/CPRA
- Experience with SOC 2 Type II, HITRUST, PCI DSS and ISO 27001 audits
- Strong knowledge of application, network and cloud security (AWS, Azure), NIST CSF and OWASP
- Experience running incident response, risk management, vulnerability management, penetration testing and security awareness
- Executive-level communication skills
- Experience managing budget and resources
Preferred Qualifications
- Leading security through an IPO, acquisition or large audit cycle
- Background in healthcare, digital health or highly regulated environments
- Experience leading security in a remote-first, global company
- Familiarity with compliance automation platforms such as Drata
- Experience building a security engineering practice
Benefits
- Competitive compensation and equity
- Comprehensive health and wellness benefits
- Flexible time off
- Comprehensive parental leave and family-forming benefits
About the Company
Carrot is a global fertility and family care platform serving over a thousand employers, health plans and health systems across 195 countries.
What we look for
- Bachelor's degree in Computer Science, IT or related field, or equivalent experience
- 10+ years in technology, including 5+ years in information security and 3+ years leading security teams
- CISSP or CISM certification
- Experience leading security at a late-stage startup, scale-up or public company
- Working depth in HIPAA, GDPR and CCPA/CPRA
- Experience with SOC 2 Type II, HITRUST, PCI DSS and ISO 27001 audits
- Strong knowledge of application, network and cloud security (AWS, Azure), NIST CSF and OWASP
- Experience running incident response, risk management, vulnerability management, penetration testing and security awareness
- Executive-level communication skills
- Experience managing budget and resources
- Leading security through an IPO, acquisition or large audit cycle
- Background in healthcare, digital health or highly regulated environments
AWSCybersecurityCloud SecurityRisk AssessmentAzureincident responseSOC 2ISO 27001Penetration TestingVulnerability ManagementOWASPPCI DSSHIPAANIST CSFHITRUST
SponsorWake up to a shortlist, not a search results page.
NeverApply scores every new listing against your CV, salary floor and visa. A handful of real matches by morning.
Get your daily matchesSimilar jobsbased on title, category and scope
Carrot
SponsorWake up to a shortlist, not a search results page.
NeverApply scores every new listing against your CV, salary floor and visa. A handful of real matches by morning.
Get your daily matchesDirector, Information SecurityCarrot · free account, 30 seconds