VP Security - CISO

February 1

Apply Now

Receive Emails with Similar Jobs

Carrot Fertility

WebsiteLinkedInAll Job Openings

Carrot Fertility is a leading provider of comprehensive fertility and family-building benefits and support services. The company offers personalized care and management for a wide range of fertility needs, from egg and sperm freezing, to IVF, gestational surrogacy, and adoption. Carrot also provides support for pregnancy and postpartum, parenting, menopause, and gender-affirming care. Operating in over 170 countries with a network of over 10,000 providers, Carrot ensures culturally competent, individualized care for all its members. Additionally, the company offers a unique payment solution through the Carrot Card, and supports employers, health plans, and members with innovative, cost-effective solutions for fertility and family-building.

fertility • employee benefits • fertilitybenefits • healthcare • fertilitycoverage

201 - 500 employees

⚕️ Healthcare Insurance

🤝 B2B

🧘 Wellness

💰 $75M Series C on 2021-08

📋 Description

• Carrot is a high-growth tech-enabled health benefits company that has scaled rapidly. • As VP of Security (CISO), you will be entrusted with taking our Security function to the next stage of maturity. • You will be critical in ensuring the security and privacy of the highly sensitive data of our members. • Carrot is dedicated to expanding access and improving outcomes with industry-leading cost savings.

🎯 Requirements

• Bachelor’s degree in a relevant field (e.g. Computer Science, Software Engineering, or Information Technology) • Minimum of 10+ years of Information Technology experience, including 5+ years of experience with Information Security • CISSP, CISM, or other relevant security certification required • Senior leadership experience overseeing the Security function of a late stage startup or public company • Exceptional communication abilities, enabling effective collaboration with the executive leadership team to prioritize practical and secure solutions for strategic initiatives • Experience and great confidence in engaging with strategic customers in the sales process, emphasizing Carrot’s high standard of security and working to understand their needs and requirements • Deep experience in the healthcare industry, and great understanding of global data protection and privacy frameworks designed to protect health data such as HIPAA, GDPR, and CCPA/CPRA • Experience overseeing implementation and ongoing compliance of enterprise security frameworks, including SOC 2 Type II, HITRUST, PCI DSS, and ISO 27001 • Experience with and understanding of application security frameworks and best practices, including NIST CSF and OWASP • Great understanding of and experience with application security, network security, and cloud hosting providers such as AWS and Azure • Experience running or overseeing Security initiatives and programs such as Incident Response, Risk Management, Data Privacy, Audits, Security Operations, Vulnerability Management, Penetration Testing, Security Awareness Training, Phishing Awareness Campaigns, and Bug Bounties • Experience in budget management and resource allocation

🏖️ Benefits

• Health and wellness benefits • Retirement savings plans • Short- and long-term incentives • Parental leave • Family-forming assistance • Competitive compensation package