Share of this job’s tasks that AI is already used for at work, from real usage. It is not a forecast of job loss, and a low number means no use seen yet. Source: Anthropic Economic Index.

Check how this applies to your own job

Skills this job asks for

Say which you have and which you want to build. We use it to match you to jobs like this one.

About the job

Insurance plays an important role in people’s lives, providing protection and peace of mind through life’s adventures and unexpected turns. In the moments that matter, people want to know their insurer is there for them. At Hi Marley, we help insurers deliver on that promise through communication that brings greater clarity and connection to the policyholder experience.

About the Role

When an insurance carrier asks how Hi Marley protects their data, you'll be the person with the answer, and the person who makes sure it's accurate. You'll learn our products, AWS infrastructure, and AI features well enough to explain them to customers' security teams, own carrier security reviews, and be the day-to-day contact for our SOC 2 and ISO auditors. This is an individual contributor role for someone who has done this work before and is ready to own a big share of it. If you like describing a control in plain language without overstating it, you'll love this role.

We spend Mondays, Tuesdays, and Thursdays together in our Boston office to connect, collaborate, and learn from one another. Recurring meetings generally fall between 9:30am and 4:30pm, allowing flexibility around the start and end of your day. Wednesdays and Fridays are remote.

What You'll Do

Own carrier security reviews for new deals and renewals, from questionnaires and risk assessments to the security sections of RFPs

Answer carrier questions about how we use AI, and help build the evidence behind our AI governance program

Run day-to-day audit support for SOC 2 Type II and ISO, from evidence requests through tracking findings to closure

Keep our security, privacy, and AI policies current, and close the gaps between what's documented and what teams actually do

About You

3–5 years in security compliance, GRC, IT audit, or customer security assurance

Hands-on experience completing SIG, CAIQ, and custom questionnaires, and supporting a SOC 2 Type II examination, including evidence collection and auditor walkthroughs

Working knowledge of ISO/IEC 27001 or a similar standard, and enough technical depth in cloud, identity, and encryption to talk with engineers

Clear, precise writing, the organization to run many requests against deadlines, and able to work from our Boston office 3 days a week

Nice to Have

Experience in insurance or another regulated industry, including NY DFS Part 500 or NAIC rules

Exposure to ISO/IEC 42001 or the NIST AI RMF

A CISA, CISSP, CISM, or CRISC certification

Don't check every box? If this role excites you, we'd still love to hear from you.

Compensation, Benefits & Perks At Hi Marley, we are committed to fair and transparent pay practices. The annual base salary for this role is expected to fall within the range of $75,600 – $118,800, depending on experience, skills, qualifications, and location. Offers are determined based on these factors as well as internal peer equity.

In addition to base pay, we support your wellbeing and growth with:

Equity grants for all employees

401(k) with a 4% employer match

Medical, dental, vision, disability, and life insurance for employees working 30+ hours per week

Monthly wellness and annual professional development stipends

Paid parental leave

Flexible Time Off to recharge, plus enjoy Wind-down Week, our annual year-end company shutdown

Who We Are:

Three core values guide how we work:

Max Courage: Dream big, try new ideas, and take measured risks to maximize impact.

Be Humble: Lead with appreciation, compassion, and openness to learn from anyone, anywhere.

Ubuntu: Align behind a shared purpose to achieve our fullest potential together.

Life at Hi Marley combines meaningful work with clear expectations. We communicate openly and with care, stay curious, take ownership, and value every perspective. Our flexible, hybrid environment is built on trust, accountability, and mutual support—both at work and when life needs our attention.

Hi Marley is proud to be an equal employment opportunity employer. We celebrate diversity and do not discriminate based on gender, sexual orientation, gender identity, religion, race, veteran status, disability status, or any other characteristic protected by applicable law. We are committed to building an inclusive work environment representing a variety of backgrounds, perspectives, and skills, where all employees are encouraged to be their authentic selves.