The Role:

The Information Security Audit/Compliance Analyst is responsible for ensuring the security and compliance of the organization's information systems and infrastructure. The analyst will conduct regular audits to assess the effectiveness of the information security controls and identify any areas that require improvement. The analyst will also be responsible for ensuring that the organization complies with all relevant regulatory requirements and industry standards.

The Team:

The Information Security & Privacy team focuses on protecting Carrot’s data, meeting regulatory obligations, and meeting Customer requirements. Staffed by a team of 3 managers, an InfoSec analyst, and a VP of Information Security & Privacy, the team is also supported by dedicated Privacy Counsel.

Minimum Qualifications:

• 2-4 years experience performing audits, compliance assessments, and quality assurance checks.
• Knowledge and experience with the computer security and audit frameworks such as NIST, SOC 2, SOC 1, HITRUST, HIPAA, and PCI DSS.
• Strong knowledge of information security principles and practices, including but not limited to, access controls, network security, data security, and application security.

Preferred Qualifications:

• Ability to coordinate, prioritize multiple tasks, and be adaptable to change to accomplish assignments.
• Ability to work both independently and collaboratively with teams. Must be responsible and capable of working with minimal supervision to effectively achieve the goals stated above, but also work well with others.
• Knowledge of compliance monitoring tools such as Drata

Compensation:

Carrot offers a holistic Total Rewards package designed to support our employees in all aspects of their life inside and outside of work, including health and wellness benefits, retirement savings plans, short- and long-term incentives, parental leave, family-forming assistance, and a competitive compensation package. The starting base salary for this position will range from $67,000 - $89,000. Actual compensation may vary from posted base salary depending on your confirmed job-related skills and experience.