Summary

Join Carrot Fertility as a Privacy and Security Lead to lead Privacy Impact Assessments, manage data subject requests, oversee audits, and contribute to security and privacy initiatives. The team is dedicated to securing Carrot's data across domestic and international locations and operations.

Requirements

Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field
5+ years of experience in information security, data privacy, or a related field, preferably within the healthcare industry
In-depth knowledge of domestic and international privacy regulations, including California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), My Health My Data Act (MHMDA), Health Insurance Portability and Accountability Act (HIPAA), Confidentiality of Medical Information Act (CMIA), General Data Protection Regulation (GDPR)
Understanding of security principles (e.g., encryption, access control, data anonymization / pseudonymization / masking) critical to implementing privacy-by-design strategies
Experience operationalizing security and privacy controls in healthcare or other highly regulated environments

Responsibilities

Managing the Vendor Security Review (VSR) program to assess third-party vendors' security
Leading the development and implementation of Carrot’s data retention program
Configuring and maturing tracking cookie banners and consent workflows to ensure compliance
Contributing to security and privacy audits
Developing training materials to inform teams of data handling responsibilities
Continuously improving privacy and security practices, policies, and standards

Preferred Qualifications

Relevant professional certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), Certified Information Security Manager (CISM), Certified in Healthcare Privacy and Security (CHPS)
Experience implementing a global data retention schedule framework
Experience managing and/or implementing privacy enhancing technologies (PETs), including OneTrust, TrustArc, and BigID
Strong understanding of adtech principles, including the use of cookies, tracking pixels, and other digital marketing technologies, in the context of data collection, user consent, and targeted advertising
Knowledge of organizational data and infrastructure solutions, such as Microsoft Azure, Amazon Web Services, Snowflake

Benefits

Holistic Total Rewards package designed to support employees in all aspects of their life inside and outside of work, including health and wellness benefits, retirement savings plans, short- and long-term incentives, parental leave, family-forming assistance, and a competitive compensation package

Carrot Fertility is hiring a Privacy Program Manager