Carrot
The Opportunity
Carrot is looking for a Director, Information Security to lead the security program that protects the highly sensitive fertility and family-building data of members around the world. You will set the security strategy, own both corporate security (GRC, incident response, security awareness, vendor risk) and product security (application, cloud and infrastructure security, secure development lifecycle), and serve as the trusted voice on Carrot’s security posture with executives, auditors, and enterprise customers.
Day to day, you will balance setting direction with staying close to the work: prioritizing risk with Engineering and IT, guiding audit and certification cycles, coaching a small and talented team, and joining customer conversations where security is part of the buying decision. Carrot has already earned SOC 2 Type II, HIPAA, HITRUST, and PCI DSS compliance, so this role is about taking a strong foundation to the next level of maturity, not starting from scratch.
What makes this role different is the combination of stakes and influence. Few security leaders get to protect data this personal, at global scale, while working directly with executive leadership and shaping how a health platform is built, sold, and trusted.
What You’ll Own
In this role, you will:
Lead Carrot’s security strategy and roadmap, using a recognized maturity model (such as C2M2 or NIST CSF) to prioritize investments and report progress to executive leadership
Own the full security program across corporate security (GRC, incident response, security awareness, vendor risk) and product security (application, cloud and infrastructure security, secure development lifecycle), and serve as the trusted voice on Carrot’s security posture with executives, auditors, and enterprise customers
Balance setting direction with staying close to the work: prioritizing risk with Engineering and IT, guiding audit and certification cycles, coaching a small and talented team, and joining customer conversations where security is part of the buying decision
Carrot has already earned SOC 2 Type II, HIPAA, HITRUST, and PCI DSS compliance, so this role is about taking a strong foundation to the next level of maturity, not starting from scratch
What makes this role different is the combination of stakes and influence. Few security leaders get to protect data this personal, at global scale, while working directly with executive leadership and shaping how a health platform is built, sold, and trusted.
Compensation:
Carrot offers a holistic Total Rewards package designed to support our employees in all aspects of their lives inside and outside of work, including health and wellness benefits, retirement savings plans, short- and long-term incentives, parental leave, family-forming assistance, and a competitive compensation package. The starting base salary for this position will range from $188,000.00 – $245,000.00. Actual compensation may vary from posted base salary depending on your confirmed job-related skills and experience.
Fraud and Security Notice: Please note that all communication regarding job opportunities at Carrot will come exclusively from an @get-carrot.com email address. If you receive messages from any other domain, please disregard them and report the incident to: ** Redacted **
A Note on AI
At Carrot, we believe AI can help us work smarter, move faster, and create more meaningful experiences for our members, customers, and each other. While not every role requires deep technical AI expertise, we value people who are curious, eager to learn, and excited to thoughtfully incorporate AI into their day-to-day work.
For some roles, AI fluency is a core requirement—and we’ll call that out clearly in the qualifications. For everyone else, we’re looking for people who embrace new ways of working, use AI responsibly to improve quality and efficiency, and continue to learn as the technology evolves.
Why Carrot?
Carrot has received national and international recognition for its pioneering work, including Fast Company’s Most Innovative Companies and World Changing Ideas, Inc. Power Partners, and Modern Healthcare’s Innovators. Carrot’s global workforce has been acknowledged with several accolades, including Fortune’s Best Workplaces in Healthcare, Great Place to Work, and Age-Friendly Employer certifications. Carrot is regularly featured in media reporting on issues related to the future of work, women in leadership, and healthcare innovation, including MSNBC, The Economist, Bloomberg, The Wall Street Journal, CNBC, National Public Radio, Harvard Business Review, and more. Learn more at carrotfertility.com.