Security Trust & Compliance Analyst

Insurance plays an important role in people’s lives, providing protection and peace of mind through life’s adventures and unexpected turns. In the moments that matter, people want to know their insurer is there for them. At Hi Marley, we help insurers deliver on that promise through communication that brings greater clarity and connection to the policyholder experience.  

About the Role

When an insurance carrier asks how Hi Marley protects their data, you'll be the person with the answer, and the person who makes sure it's accurate. You'll learn our products, AWS infrastructure, and AI features well enough to explain them to customers' security teams, own carrier security reviews, and be the day-to-day contact for our SOC 2 and ISO auditors. This is an individual contributor role for someone who has done this work before and is ready to own a big share of it. If you like describing a control in plain language without overstating it, you'll love this role.

We spend Mondays, Tuesdays, and Thursdays together in our Boston office to connect, collaborate, and learn from one another. Recurring meetings generally fall between 9:30am and 4:30pm, allowing flexibility around the start and end of your day. Wednesdays and Fridays are remote.

What You'll Do

• Own carrier security reviews for new deals and renewals, from questionnaires and risk assessments to the security sections of RFPs
• Answer carrier questions about how we use AI, and help build the evidence behind our AI governance program
• Run day-to-day audit support for SOC 2 Type II and ISO, from evidence requests through tracking findings to closure
• Keep our security, privacy, and AI policies current, and close the gaps between what's documented and what teams actually do

About You

• 3–5 years in security compliance, GRC, IT audit, or customer security assurance
• Hands-on experience completing SIG, CAIQ, and custom questionnaires, and supporting a SOC 2 Type II examination, including evidence collection and auditor walkthroughs
• Working knowledge of ISO/IEC 27001 or a similar standard, and enough technical depth in cloud, identity, and encryption to talk with engineers
• Clear, precise writing, the organization to run many requests against deadlines, and able to work from our Boston office 3 days a week

Nice to Have

• Experience in insurance or another regulated industry, including NY DFS Part 500 or NAIC rules
• Exposure to ISO/IEC 42001 or the NIST AI RMF
• A CISA, CISSP, CISM, or CRISC certification

Don't check every box? If this role excites you, we'd still love to hear from you.

Compensation, Benefits & Perks
At Hi Marley, we are committed to fair and transparent pay practices. The annual base salary for this role is expected to fall within the range of $75,600 – $118,800, depending on experience, skills, qualifications, and location. Offers are determined based on these factors as well as internal peer equity.

In addition to base pay, we support your wellbeing and growth with: 

• Equity grants for all employees 
• 401(k) with a 4% employer match 
• Medical, dental, vision, disability, and life insurance for employees working 30+ hours per week 
• Monthly wellness and annual professional development stipends 
• Paid parental leave 
• Flexible Time Off to recharge, plus enjoy Wind-down Week, our annual year-end company shutdown

Who We Are:

Three core values guide how we work: 

• Max Courage: Dream big, try new ideas, and take measured risks to maximize impact. 
• Be Humble: Lead with appreciation, compassion, and openness to learn from anyone, anywhere. 
• Ubuntu: Align behind a shared purpose to achieve our fullest potential together. 

Life at Hi Marley combines meaningful work with clear expectations. We communicate openly and with care, stay curious, take ownership, and value every perspective. Our flexible, hybrid environment is built on trust, accountability, and mutual support—both at work and when life needs our attention.  

Hi Marley is proud to be an equal employment opportunity employer. We celebrate diversity and do not discriminate based on gender, sexual orientation, gender identity, religion, race, veteran status, disability status, or any other characteristic protected by applicable law. We are committed to building an inclusive work environment representing a variety of backgrounds, perspectives, and skills, where all employees are encouraged to be their authentic selves.