InsurTech, AI/ML, SaaS, Conversational AI

Security Trust & Compliance Analyst

Boston, MAHybridFull Time$75,600–$118,800 /yrPosted 23 days agoVisa sponsorship available

Is this role right for you?

Upload your resume and get a skill-by-skill breakdown — see exactly where you match, where you're close, and what to highlight. Not a mystery percentage.

Get a tailored resume highlighting what this role needs.

Required skills

security questionnaires
RFPs
SOC 2 Type II
ISO 27001
AWS
identity and access management
encryption
software development lifecycle
SIG
CAIQ

Nice to have

insurance
financial services
NY DFS Part 500
ISO/IEC 42001
AI governance
Vanta

Role summary

Hi Marley is seeking a Security Trust & Compliance Analyst to manage customer and auditor inquiries regarding data protection. This individual contributor role involves learning product and operations to answer security questionnaires, RFPs, and due diligence requests, primarily for insurance carriers. Responsibilities include supporting SOC 2 and ISO audits, managing evidence collection, and maintaining security and AI policies. The ideal candidate has 3-5 years of experience in security compliance, GRC, or IT audit within a B2B SaaS environment, with hands-on experience in security questionnaires, SOC 2 Type II examinations, and a working knowledge of ISO 27001. Technical understanding of cloud infrastructure (AWS) and clear writing skills are essential. Familiarity with AI governance frameworks and regulated industries is a plus.

Insurance plays an important role in people’s lives, providing protection and peace of mind through life’s adventures and unexpected turns. In the moments that matter, people want to know their insurer is there for them. At Hi Marley, we help insurers deliver on that promise through communication that brings greater clarity and connection to the policyholder experience.

About the Role

When an insurance carrier asks how Hi Marley protects their data, you'll be the person with the answer, and the person who makes sure it's accurate. You'll learn our products, AWS infrastructure, and AI features well enough to explain them to customers' security teams, own carrier security reviews, and be the day-to-day contact for our SOC 2 and ISO auditors. This is an individual contributor role for someone who has done this work before and is ready to own a big share of it. If you like describing a control in plain language without overstating it, you'll love this role.

We spend Mondays, Tuesdays, and Thursdays together in our Boston office to connect, collaborate, and learn from one another. Recurring meetings generally fall between 9:30am and 4:30pm, allowing flexibility around the start and end of your day. Wednesdays and Fridays are remote.

What You'll Do

Own carrier security reviews for new deals and renewals, from questionnaires and risk assessments to the security sections of RFPs

Answer carrier questions about how we use AI, and help build the evidence behind our AI governance program

Run day-to-day audit support for SOC 2 Type II and ISO, from evidence requests through tracking findings to closure

Keep our security, privacy, and AI policies current, and close the gaps between what's documented and what teams actually do

About You

3–5 years in security compliance, GRC, IT audit, or customer security assurance

Hands-on experience completing SIG, CAIQ, and custom questionnaires, and supporting a SOC 2 Type II examination, including evidence collection and auditor walkthroughs

Working knowledge of ISO/IEC 27001 or a similar standard, and enough technical depth in cloud, identity, and encryption to talk with engineers

Clear, precise writing, the organization to run many requests against deadlines, and able to work from our Boston office 3 days a week

Nice to Have

Experience in insurance or another regulated industry, including NY DFS Part 500 or NAIC rules

Exposure to ISO/IEC 42001 or the NIST AI RMF

A CISA, CISSP, CISM, or CRISC certification

Don't check every box? If this role excites you, we'd still love to hear from you.

Compensation, Benefits & PerksAt Hi Marley, we are committed to fair and transparent pay practices. The annual base salary for this role is expected to fall within the range of $75,600 – $118,800, depending on experience, skills, qualifications, and location. Offers are determined based on these factors as well as internal peer equity.

In addition to base pay, we support your wellbeing and growth with:

Equity grants for all employees

401(k) with a 4% employer match

Medical, dental, vision, disability, and life insurance for employees working 30+ hours per week

Monthly wellness and annual professional development stipends

Paid parental leave

Flexible Time Off to recharge, plus enjoy Wind-down Week, our annual year-end company shutdown

Who We Are: Three core values guide how we work:

Max Courage: Dream big, try new ideas, and take measured risks to maximize impact.

Be Humble: Lead with appreciation, compassion, and openness to learn from anyone, anywhere.

Ubuntu: Align behind a shared purpose to achieve our fullest potential together.

Life at Hi Marley combines meaningful work with clear expectations. We communicate openly and with care, stay curious, take ownership, and value every perspective. Our flexible, hybrid environment is built on trust, accountability, and mutual support—both at work and when life needs our attention.

Hi Marley is proud to be an equal employment opportunity employer. We celebrate diversity and do not discriminate based on gender, sexual orientation, gender identity, religion, race, veteran status, disability status, or any other characteristic protected by applicable law. We are committed to building an inclusive work environment representing a variety of backgrounds, perspectives, and skills, where all employees are encouraged to be their authentic selves.

Ready to apply?

You'll be redirected to Hi Marley's application page.